Hi, When using JDBCRealm with Tomcat, does anyone know if the user's roles are loaded from the database for each request, or are they loaded once and held in a session object? Regards Andy -- To unsubscribe, e-mail: <ma...@jakarta.apache.org> For additional commands, e-mail: <ma...@jakarta.apache.org>