We are using <application-policy> to management our user logins and roles. Our problem is that when we changed the user role, the Jboss will know the role change until it was shutdown and restarted. We found the following in jboss-service.xml.
<!-- AS Temporary not available
But it is not available now. Does anybody how to solve this problem? Thanks in advance
You need to flush the authentication cache.
The parameter is the security domain.
You can do this from java, it is a JMX operation.