Is the user already authenticated before you invoke addRole() in your rule? If not, then
calling addRole() simply puts the role into a temporary "holding" area until
authentication is successful, at which point it becomes a "real" role which will
then return true for a hasRole() check.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4061086#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...