[#4381] - Role mappings don't work for externally authenticated users

I've configured jasperserver to use LDAP for authentication. I am able to login successfully but having trouble in role mapping.

Using below bean definition my groupRoleAttribute returns ca-dev-user,ca-qa-user.

<bean class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.ldap.JSDefaultLdapAuthoritiesPopulator">
<constructor-arg index="0"><ref local="ldapContextSource"/></constructor-arg>
<constructor-arg index="1"><value>ou=Group,ou=orgUnit,o=orgName</value></constructor-arg>
<property name="groupRoleAttribute" value="cn"/>
<property name="groupSearchFilter" value="(&amp;(|(cn=ca-dev*)(cn=ca-qa*))(memberuid={1}))"/>
<property name="searchSubtree" value="true"/>
<!-- Can setup additional external default roles here <property name="defaultRole" value="LDAP"/> -->
</bean>
...

and it gets converted to ROLE_CA_DEV_USER and ROLE_CA_QA_USER but still my below mapping doesnt work.

<bean id="externalUserSetupProcessor" class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.ExternalUserSetupProcessor" parent="abstractExternalProcessor">
...
<property name="organizationRoleMap">
<map>
<entry>
<key>
<value>ROLE_CA_QA_USER</value>
</key>
<value>ROLE_USER</value>
</entry>
<entry>
<key>
<value>ROLE_CA_DEV_USER</value>
</key>
<value>ROLE_ADMINISTRATION</value>
</entry>
</map>
</property>
</bean>

The work around that I had to do was to use the value when ROLE prefix is applied to my upper case groupRoleAttribute as shown below.

<bean id="externalUserSetupProcessor" class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.ExternalUserSetupProcessor" parent="abstractExternalProcessor">
...
<property name="organizationRoleMap">
<map>
<entry>
<key>
<value>ROLE_CA-QA-USER</value>
</key>
<value>ROLE_USER</value>
</entry>
<entry>
<key>
<value>ROLE_CA-DEV-USER</value>
</key>
<value>ROLE_ADMINISTRATION</value>
</entry>
</map>
</property>
</bean>

I believe the mapping is looked into before converting hypen to '-' to underscore '_'.