That is NOT a good description of my post. There's nothing more to be descriptive about.
there is a method: isUserInRole() which checks if a user has the role you pass that method. I want a method that retrieves all the roles the user has/is a ameber of. I cannot find such a method. Is there one?
I don't think there is. I skimmed both the J2EE API (link in my signature) and SRV12 in the Servlet Spec (also has a link in my signature).
The only 3 methods that seem to be available to the Servlet programmer are:
There also are not any methods for adding users to roles, creating roles, removing etc... It seems that the intent of the spec was to keep the management of these deployment issues outside of the actual application. [ May 18, 2005: Message edited by: Ben Souther ]