The Jacc Helper uses the principals stored in the subject for doing perm checks.

There can be a need to perform role mapping on the roles. It is necessary to pick the roles from the JBoss Security Manager.

We can use RealmMapping.getUserRoles to maintain compatibility with the 4.0.x series.

In HEAD, ReamMapping calls internally the AuthorizationManager which will do role mapping (if user wishes) before providing the current roles. In 4.0.x, RealmMapping.getUserRoles anyway gets the roles from the authenticated subject.