Shouldn't that have been @RolesAllowed({"role1"}) ?
(since value takes a list of roles, not just one?)
Moises
On Mar 24, 2010, at 5:06 PM, Ersin Er wrote:
> And finally in one of my resources I have @RolesAllowed("role1").
>
> The problem is that both users (so both roles) are able to access the resource after authentication. However I only expect user1 to access to resource.