Hi Bill,
I have a unique user with the roles "administrator,user" and infact on frontend application is working, the backend is not. I'm working on domain level.

The backend is a JAX-RS (resteasy) service running on an embedded undertown instance. I configured resteasy using resteasy.role.based.security=true and 
the annotation @RolesAllowed("user") on the method.

Now in order to proceed with development I replaced the annotation with @PermitAll.

Thanks for your time!

--
Davide