You must note the following points when using the methods of the SecurityContext interface:

• Do not specify null in the arguments of the isUserInRole(String role) method. If you specify null, the operation is not guaranteed.