2004-01-15

public boolean isUserInRole(String role) {
        // Have we got an authenticated principal at all?
        if (userPrincipal == null)
            return (false);
        // Identify the Realm we will use for checking role assignmenets
        if (context == null)
            return (false);
        Realm realm = context.getRealm();
        if (realm == null)
            return (false);
        // Check for a role alias defined in a <security-role-ref> element
        if (wrapper != null) {
            String realRole = wrapper.findSecurityReference(role);
            if ((realRole != null) &&
                realm.hasRole(userPrincipal, realRole))
                return (true);
        }
        // Check for a role defined directly as a <security-role>
        return (realm.hasRole(userPrincipal, role));
    }