[jboss-jira] [JBoss JIRA] (AS7-3140) web services security is ignoring roles mapped in jboss-app.xml