Accessing groups in a session bean

[Sebastiaan Kortleven]

Hi there,
So I created my own little LoginModule, based on the DatabaseServerLoginModule supplied by JBoss. All works fine and the login succeeds and fails where expected.
In the loginmodule I add several groups of principals to the subject.
I have a group called Roles, and 3 other groups.
I only use the Roles group to make sure the user logs in. Our security system is based on Siebel, where they use Positions and Responsibilities, so I add these groups and fill them accordingly.
Now, in a bean I can access the context and ask for the CallerPrincipal, doing a getName() on that principal gives me the username. But how can I access the groups I created in the loginmodule? (I need those for some application specific security handling)

[norman richards]

You don't enumerate the groups, you ask if the person is in the group/role:

if (ctx.isCallerInRole("admin")) {
    // do some work
}