[jboss-jira] [JBoss JIRA] Reopened: (JBWEB-19) Make isUserInRole() and getUserPrincipal() available on unsecured pages

Make isUserInRole() and getUserPrincipal() available on unsecured pages ----------------------------------------------------------------------- Key: JBWEB-19 URL: https://jira.jboss.org/jira/browse/JBWEB-19 Project: JBoss Web Issue Type: Feature Request Security Level: Public(Everyone can see) Components: Security Environment: Any Reporter: Jeff Schnitzer Assignee: Remy Maucherat Fix For: 4.3.0.GA_CP08 Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always returns false on unsecured pages, even after the user has been authenticated. It would be much more useful if these always returned proper values. This confusion comes up on the JAAS forums frequently.