[jboss-user] [Security & JAAS/JBoss] - request.isUserInRole(