Looks like there's a mismatch between the names of the roles in the code and the names of
the roles in the descriptor.
E.g. : application_asset_admin vs. application_assetS_admin
AssetManagerEJB.java (Just the meat):
@Stateless
@DeclareRoles({
"application_asset_admin",
"application_asset_read",
"application_asset_write"
})
<security-role>
<description>Users with admin access to the assets application.</description>
<role-name>application_assets_admin</role-name>
</security-role>
[Message sent by forum member 'ksak' (ksak)]
http://forums.java.net/jive/thread.jspa?messageID=217910