[jboss-user] [Security & JAAS/JBoss] - How to assign roles based on a request parameter without sub