// call setRollbackOnly on XMLDispatcherContext if necessary
new XdCtxRollbackHandler(rollbackOnUserAndAppExceptions,
// unwrap XMLDispatcherRuntimeException
new BasicExceptionUnwrapHandler(
// handle session/sessionData
new SessionHandler(
// role checking (after SessionHandler, in case the userid is stored in the session)
new RoleCheckerHandler(userRoleChecker,roleDefinitionsLoader,
// marshall rqst/rply (late in the chain, to avoid the un marshalling cost
// if something fails before, like role checking)
new MarshallerHandler(xmlMarshaller,