Security: obtaining user roles (JAZNUserAdaptor)

Question

Hello,
I have a simple application which is configured to use the DBTableOraDataSourceLoginModule login module for its authentication. Using this, it is straightforward to control access to the application.
Now, suppose that I have a user "TOM" with application roles of "STADMINROLE" and "STSTDROLE". In my code, I attempt to determine the roles assigned to the logged in user:
        FacesContext facesContext = FacesContext.getCurrentInstance();
        ExternalContext externalContext = facesContext.getExternalContext();
        JAZNUserAdaptor principal = (JAZNUserAdaptor)externalContext.getUserPrincipal();
        Set groups = principal.getGroups();Now, when I come to examine 'groups', I find that it contains not two but THREE elements:
        [JAZNGroupAdaptor: STADMINROLE]
        [JAZNGroupAdaptor: STSTDROLE]
        [JAZNGroupAdaptor: TOM]I have two questions:
1. why is the username apparently included as a group (there is no such group as 'TOM' defined in the appropriate database tables)?
2. is JAZNUserAdaptor documented anywhere?
I'm running OC4J 10.1.3.2.0, and my application is a small JSF project.
Thanks,
Alistair.

Answer 1

Bingo! In case it is useful to somebody else:
        FacesContext facesContext = FacesContext.getCurrentInstance();
        ExternalContext externalContext = facesContext.getExternalContext();
        JAZNUserAdaptor userPrincipal = (JAZNUserAdaptor)externalContext.getUserPrincipal();
        Subject subject = principal.getSubject();
        Set<Principal> allPrincipals = subject.getPrincipals();
        for (Principal principal : allPrincipals) {
            if (principal instanceof DBRolePrincipal) {
                // add as a role
        }Thank you, Frank - for your reply here and the various tutorials and blog entries that have been so useful over the last few weeks as I try to come to grips simultaneously with Oracle, Java, EJBs, JSF...
Alistair.