DefaultLoginModule resolves roles of user by groups of hippo repository, seems unclear to find JEE roles.

• Currently, it uses the query by default which had been used in HstLogin forge project module like this:

public static final String DEFAULT_ROLES_OF_USER_QUERY =
"//element(*, hipposys:group)[(@hipposys:members = ''

{0}'' or @hipposys:members = ''*'') and @hipposys:securityprovider = ''internal'']";

--> ''{0}

'' will be replaced by user name. (e.g., 'author').

The query above is actually group node query.
Currently, there's no explicit mapping rule between hippo repository roles/groups and JEE roles.