Please note that the proposed solution uses classes and methods that are not part of the official GlassFish interface and, therefore, could change.
I spoke with one of our security folks who is planning to post his own reply here to fill in some more information about this.
- Tim
[Message sent by forum member 'tjquinn' (tjquinn)]
http://forums.java.net/jive/thread.jspa?messageID=245122