How to change the JAAS context from an interceptor?
===

I want to ask if it is possible to change the JEE JAAS Context (assigned user roles) from an ejb interceptor?
I have a few EJB Session beans which are using the method 'isUserInRole()' to test for authorisation. On the other hand my application is managing user profiles with some special informations which can not be mapped to the JAAS roles/groups managed through the application Java EE realm, because they are created during runtime.
My idea is to implement something like an EJB interceptor, check the informations stored in the users profile form my application, and add some new custom roles to the users credentials/subject? So the result would be a new dynamic role definition assigned to the credentials which can be asked by my session beans. But these roles will not be hard coded in the ejb (@RolesAllowd) or in the ejb-jar.xml or sun-ejb-jar.xml descriptors.  

Thanks for any help in this question.