added a comment - - edited
There is now this grouper.properties setting:
# if we should use a root session if one isnt started for subject lookups (behavior in v2.0-
subjects.startRootSessionIfOneIsntStarted = true
Which defaults to true in v2.0.2+, but i think we should change it to default to false in 2.1+ so that you have to start a grouper session if you are doing subject lookups... if you have scripts that rely on the old behavior, you can change it of course...