securis/src/main/java/net/curisit/securis/ioc/RequestsInterceptor.java
.. .. @@ -143,8 +143,10 @@ 143 143 if (user != null) { 144 144 userRoles = 0; 145 145 List<Integer> roles = user.getRoles(); 146 - for (Integer rol : roles) {147 - userRoles += rol;146 + if (roles != null) {147 + for (Integer rol : roles) {148 + userRoles += rol;149 + }148 150 } 149 151 // We store user roles in cache only for one hour 150 152 cache.set("roles_" + username, userRoles, 3600);