In our webapp I load the Spring context using the ContextLoaderListener ServletContextListener. Now, following a new requirement from security, I need to restrict access to jndi resources to a certain j2ee role as in
<run-as>
<role-name>myRole</role-name>
</run-as>

Unfortunately the <listener> tag in web.xml does not allow this restriction while Spring needs acces to a jndi data-source.
Any suggestions?