I think this is the problem: Role(name == "admin") | not Role(name == "user") try: Role(name == "admin" && name != "user") View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4097302#4097302 Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4097302