Bill, thanks. I tried 2006-9-14 (the timestamp of the release on sf and inside the archive) but the line numbers for jbosssx (the starting point for me) just don't match with the ones from the code's debug information. In fact, I'm even confused about which repository is the correct one. The version I mentioned above is from CVS. SVN also has a JBossAuthorizationManager in /repos/jbossas/projects/security et al. However, those versions lack the updateCache method. Thanks! View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3992861#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...