Index: lams_build/conf/unix/authentication/authentication.xml
===================================================================
diff -u -r2f70901e70bedfd5bafb0d850b7f461205690b1a -r48b4a2b4dc664ec5176ba9a62c505d59aed16f44
--- lams_build/conf/unix/authentication/authentication.xml	(.../authentication.xml)	(revision 2f70901e70bedfd5bafb0d850b7f461205690b1a)
+++ lams_build/conf/unix/authentication/authentication.xml	(.../authentication.xml)	(revision 48b4a2b4dc664ec5176ba9a62c505d59aed16f44)
@@ -21,15 +21,27 @@
 <Method Name="LAMS-Database" Enabled="true">
 	<Param Name="dsJndiName">java:/jdbc/lams-ds</Param>
 	<Param Name="principalsQuery">select password from lams_user where login=?</Param>
-	<Param Name="rolesQuery">select name,'Roles' from lams_role, lams_user where login=?</Param>
+	<Param Name="rolesQuery">
+	            SELECT DISTINCT  r.name,'Roles' FROM
+             	lams_user u LEFT OUTER JOIN lams_user_organisation uo USING(user_id)
+             	LEFT OUTER JOIN lams_user_organisation_role urr USING(user_organisation_id)
+             	LEFT OUTER JOIN lams_role r USING (role_id)
+             	WHERE u.login=?
+	</Param>
 </Method>
 
 <Method Name="Oxford-WebAuth" Enabled="true">
 	<Param Name="WebAuthTokenName">WEBAUTH_USER</Param>
 	<Param Name="WebAuthTriggerPage">https://array00.melcoe.mq.edu.au/webauth.html</Param>
 	<Param Name="DummyPasswordForWebAuthUser">dummy</Param>
 	<Param Name="dsJndiName">java:/MySqlDS</Param>
-	<Param Name="rolesQuery">select name,'Roles' from lams_role, lams_user where login=?</Param>
+	<Param Name="rolesQuery">
+	            SELECT DISTINCT  r.name,'Roles' FROM
+             	lams_user u LEFT OUTER JOIN lams_user_organisation uo USING(user_id)
+             	LEFT OUTER JOIN lams_user_organisation_role urr USING(user_organisation_id)
+             	LEFT OUTER JOIN lams_role r USING (role_id)
+             	WHERE u.login=?
+	</Param>
 </Method>
 
 <!-- NOT in USE -->
@@ -47,7 +59,13 @@
 	<Param Name="com.lams.naming.import.ldap.factory.initial">com.sun.jndi.ldap.LdapCtxFactory</Param>
 	<Param Name="dsJndiName">java:/MySqlDS</Param>
 	<Param Name="principalsQuery">select password from lams_user where login=?</Param>
-	<Param Name="rolesQuery">select name,'Roles' from lams_role, lams_user where login=?</Param>
+	<Param Name="rolesQuery">
+	           	SELECT DISTINCT  r.name,'Roles' FROM
+             	lams_user u LEFT OUTER JOIN lams_user_organisation uo USING(user_id)
+             	LEFT OUTER JOIN lams_user_organisation_role urr USING(user_organisation_id)
+             	LEFT OUTER JOIN lams_role r USING (role_id)
+             	WHERE u.login=?
+	</Param>
 </Method>
 
 </Authentication>