I have integrated Acegi into my application and am now trying to assign roles. I want two roles 1)Regular User 2)View only user. I was planning on using the ROLE_SUPERVISOR and ROLE_USER (for view). If I use one role everything works fine. When I add the other role I start getting access denied errors. I am using the net.sf.acegisecurity.vote.RoleVoter.

Code:
/*.htm*=ROLE_USER,ROLE_SUPERVISOR
For now I am using in memory while I develop

Code:
<value>
  User=pass,ROLE_USER,ROLE_SUPERVISOR
  User2=pass2,ROLE_USER
</value>
Code:
HTTP Status 403 - Access is denied.

--------------------------------------------------------------------------------

type Status report

message Access is denied.

description Access to the specified resource &#40;Access is denied.&#41; has been forbidden.


--------------------------------------------------------------------------------

Apache Tomcat/5.0.18
User gets in fine. User2 does not get in (error above). I read and re-read the info in the reference document and it seems that this setup should work fine.

Help please.....

Thanks