title: Wildfly: Why I get only "Forbidden" if I call my Web application?
body: <p>Yesterday our web application ran fine on WildFly 9. Since this morning I get only a "Forbidden" in the web browser. We don't use JAAS. There is also no difference if I set the following value to <code>false</code> in the <code>standalone.xml</code>:</p>
  
  <pre><code>...
  &lt;subsystem xmlns="urn:jboss:domain:ejb3:3.0"&gt;
     ...
     &lt;default-missing-method-permissions-deny-access value="true"/&gt;
     ...
  &lt;/subsystem&gt;
  ...
  </code></pre>
  
  <p>What can be the reasons that WildFly only shows the "Forbidden" page?</p>
  
  <p><strong>EDIT</strong></p>
  
  <p>If I set the log level for package <code>org.jboss.security</code> to <code>TRACE</code> I get the following message in the log file while calling the page:</p>
  
  <pre><code>2016-01-27 12:58:15,354 TRACE [org.jboss.security] (default task-5) PBOX00354: Setting security roles ThreadLocal: null
  </code></pre>
  
  <p>Not sure what this means ...</p>