We have encountered some cases where apparently successful login to the AMQ console with a user that seemingly has appropriate roles sees RBAC-related display issues (viewing mbean attributes results in an RBAC error displayed, instead of the value, or a blank page is displayed).

This would add additional logging to display the subject and any other relevant session information to the currentUserHasRole method (and any others that may be relevant) for debugging purposes.