You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by bu...@apache.org on 2022/06/29 13:35:19 UTC

[Bug 66134] TomcatAdminRoles ignored when using installer configuration file

https://bz.apache.org/bugzilla/show_bug.cgi?id=66134

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #1 from Mark Thomas <ma...@apache.org> ---
Note: It is recommended that you do not enable both the manager-script and
manager-gui roles for the same user as that allows the CSRF protection to be
bypassed.

I can see why the TomcatAdminRoles aren't being set as expected. I am working
on a fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org