Enthuware

if(request.isUserInRole("boss"))
{
// other valid code
}

I think I am missing something, the code // other valid code is executed when the if condition is true.

Returns a boolean indicating whether the authenticated user is included in the specified logical "role". Roles and role membership can be defined using deployment descriptors. If the user has not been authenticated, the method returns false.

The code // other valid code will be executed only when boss user is in role.

And the answer would be 'At //other valid code, the user would be in "boss" role.', doesn't it?

Please go through the explanation. It explains exactly what you are asking.

For this question, from the developer's perspective, the user is in boss role in //other valid code .
But from the deployer's perspective, the user is in manager role.
I assume the question is asking what the role is from the deployer's perspective.

That is correct. Role from the developer's perspective is obviously "boss" because that is what the code is checking.
-Paul.