IsCallerInRole(String Role) is always FALSE

Question

I have an ejb deployed on SunOne App Server 8.1 via an EAR file with a Web and EJB modules included. I call a session EJB bean from a client Servlet and able to envoke methods on the EJB. I can authenticate fine and can get the principal in the EJBContainer using getCallerPrincipal(). Now my problem is this, isCallerInRole(String Role) is always FALSE. My application descriptor files are follows. Any help on what I'm doing wrong is greatly appreciated.
Sun-ejb-jar.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sun-ejb-jar PUBLIC "-//Sun Microsystems, Inc.//DTD Application Server 8.1 EJB 2.1//EN" "http://www.sun.com/software/appserver/dtds/sun-ejb-jar_2_1-1.dtd">
<sun-ejb-jar>
<security-role-mapping>
<role-name>consultant_role</role-name>
<group-name>cn=Consultant,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>generic_role</role-name>
<group-name>cn=Generic,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>designer_role</role-name>
<group-name>cn=Designer,o=GROUPS</group-name>
</security-role-mapping>
<enterprise-beans/>
</sun-ejb-jar>
ejb-jar.xml
<?xml version="1.0" encoding="UTF-8"?>
<ejb-jar version="2.1" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/ejb-jar_2_1.xsd">
<display-name>testapp-EJBModule</display-name>
<enterprise-beans>
<session>
<display-name>UserManagementSB</display-name>
<ejb-name>UserManagementBean</ejb-name>
<local-home>aus.UserManagementLocalHome</local-home>
<local>aus.UserManagementLocal</local>
<ejb-class>aus.UserManagementBean</ejb-class>
<session-type>Stateless</session-type>
<transaction-type>Container</transaction-type>
<security-role-ref>
<role-name>consultant_role</role-name>
</security-role-ref>
<security-role-ref>
<role-name>generic_role</role-name>
</security-role-ref>
<security-role-ref>
<role-name>designer_role</role-name>
</security-role-ref>
</session>
</enterprise-beans>
<assembly-descriptor>
<security-role>
<role-name>consultant_role</role-name>
</security-role>
<security-role>
<role-name>generic_role</role-name>
</security-role>
<security-role>
<role-name>designer_role</role-name>
</security-role>
<container-transaction>
<method>
<ejb-name>UserManagementBean</ejb-name>
<method-name>*</method-name>
</method>
<trans-attribute>Required</trans-attribute>
</container-transaction>
</assembly-descriptor>
</ejb-jar>
application.xml
<?xml version="1.0" encoding="UTF-8"?>
<application version="1.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/application_1_4.xsd">
<display-name>testapp</display-name>
<module>
<web>
<web-uri>testapp-WebModule.war</web-uri>
<context-root>/testapp-WebModule</context-root>
</web>
</module>
<module>
<ejb>testapp-EJBModule.jar</ejb>
</module>
<security-role>
<role-name>sysadmin_role</role-name>
</security-role>
<security-role>
<role-name>consultant_role</role-name>
</security-role>
<security-role>
<role-name>generic_role</role-name>
</security-role>
<security-role>
<role-name>designer_role</role-name>
</security-role>
<security-role>
<role-name>library_admin_role</role-name>
</security-role>
</application>
sun-application.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sun-application PUBLIC "-//Sun Microsystems, Inc.//DTD Application Server 8.0 J2EE Application 1.4//EN" "http://www.sun.com/software/appserver/dtds/sun-application_1_4-0.dtd">
<sun-application>
<web>
<web-uri>testapp-WebModule.war</web-uri>
<context-root>/testapp-WebModule</context-root>
</web>
<security-role-mapping>
<role-name>sysadmin_role</role-name>
<group-name>cn=System_Admin,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>consultant_role</role-name>
<group-name>cn=Consultant,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>generic_role</role-name>
<group-name>cn=Generic,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>designer_role</role-name>
<group-name>cn=Designer,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>library_admin_role</role-name>
<group-name>cn=Library_Admin,o=GROUPS</group-name>
</security-role-mapping>
<realm>ldap</realm>
</sun-application>
web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4">
<servlet>
<servlet-name>IsSecureServlet</servlet-name>
<servlet-class>IsSecureServlet</servlet-class>
</servlet>
<servlet>
<display-name>formauth</display-name>
<servlet-name>formauth</servlet-name>
<jsp-file>/index.jsp</jsp-file>
</servlet>
<servlet-mapping>
<servlet-name>IsSecureServlet</servlet-name>
<url-pattern>/IsSecureServlet</url-pattern>
</servlet-mapping>
<session-config>
<session-timeout>30</session-timeout>
</session-config>
<error-page>
<error-code>403</error-code>
<location>/accessDenied.jsp</location>
</error-page>
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/admin/*</url-pattern>
<http-method>PUT</http-method>
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>sysadmin_role</role-name>
<role-name>library_admin_role</role-name>
</auth-constraint>
</security-constraint>
<security-constraint>
<web-resource-collection>
<web-resource-name>Protected Area</web-resource-name>
<url-pattern>/users/*</url-pattern>
<http-method>PUT</http-method>
<http-method>DELETE</http-method>
<http-method>GET</http-method>
<http-method>POST</http-method>
</web-resource-collection>
<auth-constraint>
<role-name>consultant_role</role-name>
<role-name>generic_role</role-name>
<role-name>designer_role</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<realm-name>ldap</realm-name>
<form-login-config>
<form-login-page>/login.jsp</form-login-page>
<form-error-page>/error.jsp</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>sysadmin_role</role-name>
</security-role>
<security-role>
<role-name>consultant_role</role-name>
</security-role>
<security-role>
<role-name>generic_role</role-name>
</security-role>
<security-role>
<role-name>designer_role</role-name>
</security-role>
<security-role>
<role-name>library_admin_role</role-name>
</security-role>
<ejb-local-ref>
<ejb-ref-name>ejb/UserManagementBean</ejb-ref-name>
<ejb-ref-type>Session</ejb-ref-type>
<local-home>aus.UserManagementLocalHome</local-home>
<local>aus.UserManagementLocal</local>
<ejb-link>testapp-EJBModule.jar#UserManagementBean</ejb-link>
</ejb-local-ref>
</web-app>
sun-web.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sun-web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Application Server 8.1 Servlet 2.4//EN" "http://www.sun.com/software/appserver/dtds/sun-web-app_2_4-1.dtd">
<sun-web-app error-url="">
<context-root>/testapp-WebModule</context-root>
<security-role-mapping>
<role-name>sysadmin_role</role-name>
<group-name>cn=System_Admin,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>consultant_role</role-name>
<group-name>cn=Consultant,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>generic_role</role-name>
<group-name>cn=Generic,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>designer_role</role-name>
<group-name>cn=Designer,o=GROUPS</group-name>
</security-role-mapping>
<security-role-mapping>
<role-name>library_admin_role</role-name>
<group-name>cn=Library_Admin,o=GROUPS</group-name>
</security-role-mapping>
<class-loader delegate="true"/>
<jsp-config>
<property value="true" name="classdebuginfo">
<description>Enable debug info compilation in the generated servlet class</description>
</property>
<property value="true" name="mappedfile">
<description>Maintain a one-to-one correspondence between static content and the generated servlet class' java code</description>
</property>
</jsp-config>
</sun-web-app>

Answer 1

Hi,
Thanks for letting us know. This was indeed a bug on our side which I have fixed now, and it will be up updated in the next drop. If you are linking the source, these are the changes you need to do.
The functions that needs to be updated in SharedProperty are
         * Determines whether the specified user can edit the property.
         * @param p_userID The user to query regarding whether they can edit.
         public function canUserEdit(p_userID:String):Boolean
            return (_collectionNode.canUserPublish(p_userID,_nodeNameText));
         * Allows the current user with an owner role to grant the specified user
         * the ability to edit the property.
         * @param p_userID The userID of the user being granted editing privileges.
        public function allowUserToEdit(p_userID:String):void
            // If I can't configure, cancel.
            if(!_collectionNode.canUserConfigure(userManager.myUserID,_nodeNameText)){
                return;
            _collectionNode.setUserRole(p_userID, UserRoles.PUBLISHER, _nodeNameText);
Thanks again. We depend on your feedbacks for improving our framework.
Regards
Hironmay Basu