Index: JCRAuthorizationModule.java
===================================================================
--- JCRAuthorizationModule.java	(revision 17987)
+++ JCRAuthorizationModule.java	(revision 17576)
@@ -54,6 +54,7 @@
 import info.magnolia.jaas.principal.GroupListImpl;
 import info.magnolia.jaas.principal.PrincipalCollectionImpl;
 import info.magnolia.jaas.principal.RoleListImpl;
+import info.magnolia.jaas.sp.AbstractLoginModule;
 
 import java.security.Principal;
 import java.util.Iterator;
@@ -73,14 +74,22 @@
  * @author Sameer Charles
  * @version $Id$
  */
-public class JCRAuthorizationModule extends JCRAuthenticationModule {
+public class JCRAuthorizationModule extends AbstractLoginModule {
 
+    public void validateUser() throws LoginException {
+    }
+
     /**
      * Logger
      */
     private static final Logger log = LoggerFactory.getLogger(JCRAuthorizationModule.class);
 
-    public void validateUser() throws LoginException {
+    // do nothing here, we are only responsible for authorization, not authentication!
+    public boolean login() throws LoginException
+    {
+        this.success = true;
+        this.setSharedStatus(STATUS_SUCCEEDED);
+        return this.success;
     }
 
     /**
@@ -249,4 +258,11 @@
         }
     }
 
+    /**
+     * {@inheritDoc}
+     */
+    public boolean release() {
+        return true;
+    }
+
 }