I'm having this sort of issue - I'm using JBossSX infrastructure with ClientLoginModule and DatabaseServerLoginModule. I would like to have the logged user data available in the session. Can i do it without using the EJB? I would like to retreive the subject from HttpSession to obtain his roles and later on, personalize the web page look depending on his role set. Is it possible ? How can I do that?