strongloop/loopback — pull request #247 by haio (2014-05-03 03:51:17+00:00)
Title: Ensure roleId and principalId to be string in Role#isInRole

This fix this similar with issue #246, when roleId or principalId is a ObjectId, we won't get expected access control. The roleId in this context must be presence, so I just make type casting on it. Please check it.