[ https://issues.jboss.org/browse/TEIID-2761?page=com.atlassian.jira.plugin... ] Ramesh Reddy commented on TEIID-2761: ------------------------------------- Right now VDB and security-domain are not related. So, if we restrict VDB to single security-domain, that will restrict to the transport(s) that is configured with. [thinking out loud] Yes, especially if they want to use data roles. It seems silly to have two sets of users that authenticate differently for a given resource. This was not the original intention, but I agree that fits the model. I believe before we made a switch to JAAS, the requirement was to use different security domains so that user could be authenticated with different security stores. In the JBoss security-domain configuration, it gives that ability to configure multiple stores inside single security-domain so that is satisfied. So in that case we could raise this above the data role level to VDB property if that makes sense. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira