Dear Mark: many thanks . but i have alreday enabled "Enforce a consistent Access Control List across all" this option. but it is the same . context.getuser() (fullName: null, name: CN=Jason Wu /OU=China, mail: null, groups: [], roles: []) . I only get user' name . but the full name ,mail,groups, roles. is null. I am very confused.