I could only achieve my intended result by adding an additional
if ( ctx.isCallerInRole("user") && !ctx.isCallerInRole("guest") ) { // needs to explicitly exclude all other roles
return principal.toString();
} else {
// throw new EJBAccessException("Username '"+principal.toString()+"' does NOT have role 'user'");
return null; // for the lazy ones
}
this is far from desireable ...
-----
Options: You can moderate through email. Respond in the body with "Delete", "Approve", or "Spam". Reply with "Like" to like this comment, or respond in the body to post a reply comment.
Or use the moderate panel: http://jdf.disqus.com/admin/moderate/#/pending