3 Replies Latest reply on Mar 31, 2006 2:05 PM by Scott Stark

    request.isUserInRole() change from 3.2.7 to 4.0.3SP1

    Rob Pumphrey Newbie

      I have two ears deployed in a JBoss container, they contain the same code base- an entity jar and a war file. The ears are configured to have different datasources, JNDI names, JAAS domains (jboss-web.xml) and different class loaders (jboss-app.xml).

      The problem I have can be described thus (as seen in V4.0.3.SP1):

      login to web app 1 with user sa - this user does not have privilege X
      [good] call request.isUserInRole("X") in web app 1 returns false

      login to web app 2 with user sa - this user does have privilege X
      [good] call request.isUserInRole("X") in web app 2 returns true
      [bad] call request.isUserInRole("X") in web app 1 returns true

      In V3.2.7 this behaves as expected and request.isUserInRole("X") in web app 1 returns false after the user sa logs into web app 2.

      My goal is to have the two applications running independantly, and now this is not the case.

      I would be grateful for suggestions as to the config setting I might have wrong, or how I might go about resolving this problem