in impl/src/main/java/org/apache/directory/fortress/realm/J2eePolicyMgrImpl.java [113:127]
public TcPrincipal createSession( String userId, String password, List<String> roles ) throws SecurityException
{
User user = new User( userId, new String ( password ) );
// Load the passed in role list into list of User requested roles:
if ( CollectionUtils.isNotEmpty( roles ) )
{
for(String role : roles)
{
user.setRoleName( role );
}
}
return createSession( user );
}