On entrace to a secured ejb method the expected roles are seen to be assigned to the caller as evidenced by the EJBContext.isCallerInRole(String) method. On calling a secured DataSource from within the ejb method, the roles are seen to be lost after the DataSource connection has been created.