--- SecurityCacheImpl.java.orig Thu Mar  6 11:09:41 2003
+++ SecurityCacheImpl.java      Thu Mar  6 11:14:24 2003
@@ -149,8 +149,12 @@
         {
             acl.addRole(role);
         }
-        perms.put(role.getName(), new HashMap());
-
+        //We're adding a role for the user, but should only load the role with
+        //empty permissions when permissions for the role are not already loaded.
+        if (!perms.containsKey(role.getName()))
+        {
+               perms.put(role.getName(), new HashMap());
+        }
     }

     public boolean hasRole(String username, String roleName)