Jesper Pedersen created SECURITY-731: ---------------------------------------- Summary: GroupPrincipalCallback overrides existing roles Key: SECURITY-731 URL: https://issues.jboss.org/browse/SECURITY-731 Project: PicketBox Issue Type: Bug Security Level: Public (Everyone can see) Components: PicketBox Affects Versions: PIcketBox_4_0_15.Final Reporter: Jesper Pedersen Assignee: Stefan Guilhen Priority: Critical GroupPrincipalCallback (JSR-196) overrides any previous roles defined by another GroupPrincipalCallback instance. It should be a merge instead. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira