P.S.
Interesting thing.
I've changed sun-web.xml by adding "<group-name>devel</group-name>":
<security-role-mapping>
<role-name>SuperReader</role-name>
<principal-name>slava</principal-name>
<principal-name>asid</principal-name>
<group-name>devel</group-name>
</security-role-mapping>
And now it works fine... Strange... My users can be without groups at all. It is a normal situation.
[Message sent by forum member 'constantinius' (constantinius)]
http://forums.java.net/jive/thread.jspa?messageID=261001