Database authorization works! The this was in jboss config. We need to define security domain and point to in in jboss web xml descriptor