Index: ./com/sun/web/security/WebSecurityManager.java
===================================================================
RCS file: /cvs/glassfish/appserv-core/src/java/com/sun/web/security/WebSecurityManager.java,v
retrieving revision 1.16
diff -u -r1.16 WebSecurityManager.java
--- ./com/sun/web/security/WebSecurityManager.java	16 Dec 2006 01:33:38 -0000	1.16
+++ ./com/sun/web/security/WebSecurityManager.java	16 Apr 2007 23:35:27 -0000
@@ -351,9 +351,10 @@
     
     private WebResourcePermission createWebResourcePermission(
             HttpServletRequest httpsr) {
-        String originalUri = httpsr.getRequestURI();
-        String mappedUri = (((HttpRequest) httpsr).getRequestPathMB() != null) ?
-            ((HttpRequest) httpsr).getRequestPathMB().toString() : null;
+        //String originalUri = httpsr.getRequestURI();
+        //String mappedUri = (((HttpRequest) httpsr).getRequestPathMB() != null) ?
+        //    ((HttpRequest) httpsr).getRequestPathMB().toString() : null;
+        String mappedUri = httpsr.getRequestURI();
         if (mappedUri == null) {
             if (logger.isLoggable(Level.FINE)){
                 logger.log(Level.FINE,"[Web-Security] mappedUri is null");