The namespace for a subject role is "urn:oasis:names:tc:xacml:2.0:subject:role"
This needs to be corrected in the context handler as well as the integration tests in JBAS trunk test suite.