[ https://issues.jboss.org/browse/WFCORE-1481?page=com.atlassian.jira.plugi... ] Tomaz Cerar commented on WFCORE-1481: ------------------------------------- This one is tricky, and was known issue when when we ware working on this feature. if my memory serves me right it was decided we shouldn't need to complicate whole code with extra chaining of calls to address this one single use case, as security subsystem was on the way out to be replaced with Elytron. But that is history, security subsystem is here to stay and we should address this. Either by complicating code for this corner case within collection handling operations or maybe even change the way security subsystem code around "virtual attribute" login-modules behaves. -- This message was sent by Atlassian JIRA (v6.4.11#64026)