You can use whatever you like. In my app when a user logs in my authenticate method loads
their roles from a database and puts them in the Identity object.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4070411#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...