Derby Authentication Provider

Hi,

I am using WebLogic 10.3.6 on Windows 2008 R2.  The requirement is to use a JDBC Read Only Authentication Provider on a Derby database, and this has been created using the supplied authenticator, but we can only see groups in the Security Realm, and not the Users.  Running the queries by hand works so we are confident that we have those correct.  We can see no errors in the log files.  The fact that we can see the groups implies that the set up is correct.

Can anyone suggest a reason for this, or where we should go next to try to resolve the issue?