possible release note content: Cause and Consequence: Customers would like a new feature about role mapping provider (similar to DeploymentRolesMappingProvider) that would map roles that are the end result of the authentication process to one or more application level roles. The DeploymentRolesMappingProvider currently only assigns users to application level roles. It does not map RoleX to RoleY. Fix and Result: this feature is achieved by the new Role to Roles Mapping Module DeploymentRoleToRolesMappingProvider since JBoss Security 2.0.6.Final. this feature can be configured in the assembly descriptor of jboss.xml, jboss-web.xml and jboss-app.xml, like other role mapping provider as follows: <application-policy name="test-domain">    <authentication>    ...    </authentication>    <mapping>       <mapping-module code="org.jboss.security.mapping.providers.DeploymentRoleToRolesMappingProvider" type="role"/>    </mapping>    ... </application-policy>