I have been wondering about the following for the SPI: Security Caching and a mechanism to flush it. Previously, the Security Caches were injected into the Security Manager via the JMX wrapper service and flush when needed was an aspect of the service. Since caching is a necessity and information can change in the background in the sources (like db, ldap etc), I was wondering about providing a formal mechanism by which data that gets updated in the source will trigger a flush of the cache. (SPML is a good choice and we do have access to OpenSPML for integration) This formal mechanism can be a JMX service that acts as the door to the information update (Currently I can see JBossPortal/Seam etc being the major users of this). I use the mechanism to update the roles in the Database, the mechanism updates the info in the DB while sending a flush to the Security Cache. Making this mechanism generic for usage is a challenge. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3968422#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...