Make isUserInRole() and getUserPrincipal() available on unsecured pages ----------------------------------------------------------------------- Key: JBWEB-19 URL: https://jira.jboss.org/jira/browse/JBWEB-19 Project: JBoss Web Issue Type: Feature Request Security Level: Public(Everyone can see) Components: Core Environment: Any Reporter: Jeff Schnitzer Assignee: Remy Maucherat Fix For: JBossWeb-2.1.3.GA Currently getUserPrincipal() returns null and ServletRequest.isUserInRole() always returns false on unsecured pages, even after the user has been authenticated. It would be much more useful if these always returned proper values. This confusion comes up on the JAAS forums frequently.