This content has been marked as final. Show 2 replies
Therefore, I'd like to ask if it is okay if I use only principalsQuery without rolesQuery ?
I don't know you have to set an role query. I "solved" this problem by using the following roles query:
SELECT varchar 'MyStaticRole' AS "roles";
It always does return the MyStaticRole as return...
The roles query behavior will be made optional in the future. If your not using declarative roles, the roles query should be something like:
select 'InvalidRole', 'Roles' from MY_USERS where userid=?
which will place the unassigned InvalidRole into the usual Subject group called 'Roles'. If you want to assign every user a guest role or similar, use that. If you don't want any declarative roles, either change 'Roles' to a name like 'NoRoles' or specify a userid that has no match.