I have successfully implemented a subclass of DatabaseServerLoginModule to handle authentication and populating the subject with identity and credentials.
Once authentication has succeeded, I am caching the Subject in the http session in my 'userVO' object. I have a getUserRoles method defined on UserVO which returns the "Roles" group members.
What I have noticed, though, is that the order of the "Roles" group members is lost between my login module and the web tier.
I tried replacing NestableGroup with MyCustomGroup to ensure the ordering is reversed but I then get an error msg on startup where I have a startup servlet invoke a remote method on an ejb to get some static data.
What is the best way to impose a custom order on these member items so that the order is not lost when populating the subject?
There is no ordering of roles, its a set.