[Jboss-dev-forums] [Design of Security on JBoss] - Re: Mapping Application Roles to Declarative Role

[<ani...@jb...>]

"j2ee_junkie" wrote : Scott,
  | 
  | anonymous wrote : Its a legacy overloaded usage of jaas that the login modules provide the declarative roles.
  | 
  | Are you saying that Login Modules really should just authenticate, and not authenticate and authorize?
  | 
  | cgriffith
No, he means the roles are populated in the subject.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3955955#3955955

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3955955