Hello, Jan
You are right, I forgot to declare the admin role in web.xml, but I am sure it works as is.
Also, I have enabled the "Default security role mapping" feature so I did not need to add a security-role-mapping element to sun-web.xml.
[Message sent by forum member 'bsevindi' (bsevindi)]
http://forums.java.net/jive/thread.jspa?messageID=331206