When an application is deployed on the App Server, unchecked "WebUserDataPermission" instances are not being created (for passing to the configured JACC provider). The problem is as follows.

Line # 180 of the file "WebPermissionMapping.java" contains the loop "while (roles.hasNext())". However, this loop is always skipped, since the "roles" Iterator is never re-initialized after the previous loop (line # 157) has completed its run. The way to fix this would be to change line #179 to read "roles = info.getTransportMethods()".