[jboss-jira] [JBoss JIRA] Closed: (JBAS-3045) Security patch for isUserInRole(String) for same principal name

Security patch for isUserInRole(String) for same principal name --------------------------------------------------------------- Key: JBAS-3045 URL: http://jira.jboss.com/jira/browse/JBAS-3045 Project: JBoss Application Server Issue Type: Support Patch Security Level: Public(Everyone can see) Affects Versions: JBossAS-4.0.3 SP1 Reporter: Scott M Stark Assigned To: Ryan Campbell Priority: Critical As described in JBAS-3043, the JBossSecurityMgrRealm mapping of Principal to GenericPrincipal is not using an application level scope and so if there are multiple web apps with the same principal, but different roles, there is a conflict in the principal to role mapping logic.