Set DefaultCacheTimeout to 0, and DefaultCacheResolution to 0.
I did that and rebuilt the jboss database. Searching on that first term should lead to helpful documentation.
I have found another solution using the JAASSecurityManager MBean. When I update user rights, I flush the cache using the MBean method.