"The error comes from line 115 in AuthorizeTag....It seems there's no control for a null value here..." * test/net/sf/acegisecurity/taglibs/authz/AuthorizeTagTests.java: Added a new test to confirm the existence of the bug. * src/net/sf/acegisecurity/taglibs/authz/AuthorizeTag.java: And fixed the failing test.