I understand your frustration. But the root cause is not GlassFish :) - it is the BASIC Auth and how
the browsers cache that information. If you have the sun-web.xml the way I think you have, you
should see that only the users belonging to the configured group being granted the access. What
happens (mostly likely) behind the scenes is that your browser sends the user name and password.
Can you retry by trying it with a new browser window?
- Kedar
[Message sent by forum member 'km' (km)]
http://forums.java.net/jive/thread.jspa?messageID=280095