We are using <application-policy> to management our user logins and roles. Our problem is that when we changed the user role, the Jboss will know the role change until it was shutdown and restarted. We found the following in jboss-service.xml.
<!-- AS Temporary not available
100
-->
But it is not available now. Does anybody how to solve this problem? Thanks in advance
You need to flush the authentication cache.
http://localhost:8080/jmx-console/HtmlAdaptor?action=inspectMBean&name=jboss.security%3Aservice%3DJaasSecurityManager
The parameter is the security domain.
You can do this from java, it is a JMX operation.
Regards,
Adrian