>
> When you package the application as EAR, then you have to make sure the
> role-mapping is available in sun-application.xml file and for
> individual deployed WAR/EJB JAR files, it should be in sun-web.xml or
> sun-ejb-jar.xml file.
As of April (I don't have the build number handy), this was changed so
that the role mapping file is found whether it is in the top level
sun-application.xml file or a sub module file instead:
https://glassfish.dev.java.net/issues/show_bug.cgi?id=2475
Cheers,
Bobby