PortletPreferences.store() : java.lang.SecurityException

Question

I'm getting the following error while trying to call store() for preferences. I came to know that user should be logged in for this but I couldn't find anywhere as to how to implement this login feature. As how the portlet will decide by itself whether the user has logged in is also a mistery for me.
Any answers would be helpful for this longtime problem.
java.lang.SecurityException: [EJB:010160]Security Violation: User: '<anonymous>' has insufficient permission to access EJB: type=<ejb>, application=FileUploadAppln, module=prefs.jar, ejb=PreferencePersistenceManager, method=storePreferences, methodInterface=Remote, signature={com.bea.netuix.application.manager.CustomizationContext,com.bea.portlet.prefs.PortletPreferencesId,java.util.Map,boolean,boolean,boolean}.

Answer 1

The error message you get here is due to your subject not being validated.
BEAs suggestet actions to resolve the error is
"Ensure that subject was created by this domain or in a domain trusted by this domain."
Please note that BEA does recomment using JAAS in stead of JNDI to associate a user with context. I would believe what you are facing here is a bug / design flaw.
To confirm this, please try to use different usernames to the different servers. "user1", "user2" .. This would maybe confirm the assumption above.
If this does not help, I will set up a test scenario and investigate further into this.
- Anders M.