It follows the J2EE security schema.
You access the principal and you can tell if the user X has role Y.
request.isUserInRole(roleName)
If you need to access the list of roles, then you need to access the user/role/membership
modules. See the API
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3988941#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...