Also note that if you are using roles then there is a bug that doesn't clear them down
when Identity.login is performed. This is fixed in CVS but not (as I am aware) in any
release version. I think someone should make this more widely known as there is a
workaround for it and it could compromise security.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4035638#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...