Jazn permissions

Question

can anyone tell me how i can retrieve user permissions for a given user using the jazn api. i am using the xml provider and have successfully added users, roles etc and have granted permissions to the roles using the jazn admin tool but am struggling to obtain the permissions for the user from my code. i am using version 10.1.2 of the oas jaas provider api. a code sample would be very helpful!
while investigating the api i have comes across a couple of strange things perhaps you could explain also. if i try to use RoleManager.getGrantees() it returns a set of XMLRealmUser objects rather than Grantee objects as the documentation suggests it should, which i obviously cannot cast into into a Grantee object for further use e.g. in JAZNContext.getPolicy().getPermissions().
also, if i try to create a Grantee with...
Realm r = JAZNContext.getRealmManager().getRealm("jazn.com");
final RealmUser ru = r.getUserManager().getUser(user);               
Grantee g = new Grantee( (Principal) ru);
the code does not compile as it cannot access oracle.ldap.util.Guid!? any help would be much appreciated.

Answer 1

Thanks Frank!
Only to make sure I understand you correctly (English is not my first language :)):
I use
package com.ssn.web.login.principals;
import [+]
public class SSNRolePrincipal implements RolePrincipal, Serializable {
...role principal class in my LoginModule.
So, for everything to work correctly you are saying that principal in system-jazn-data.xml file like
     <grant>
          <grantee>
               <principals>
                    <principal>
                         <realm-name>jazn.com</realm-name>
                         <type>role</type>
                         <class>oracle.security.jazn.spi.xml.XMLRealmRole</class>
                         <name>ONE_OF_THE_ROLES</name>
                    </principal>
               </principals>
          </grantee>
          <permissions>
...should be changed to
     <grant>
          <grantee>
               <principals>
                    <principal>
                         <realm-name>jazn.com</realm-name>
                         <type>role</type>
                         <class>com.ssn.web.login.principals.SSNRolePrincipal</class>
                         <name>ONE_OF_THE_ROLES</name>
                    </principal>
               </principals>
          </grantee>
          <permissions>
Kind regards,
BB