You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by Mark Thomas <ma...@apache.org> on 2013/06/17 14:31:01 UTC

The future of Realm's allRolesMode

Servlet 3.1 has introduced the new special role of "**" to mean any 
authenticated user. With this new feature, Tomcat's allRolesMode 
attribute on the Realm is no longer necessary.

My preference is to remove the allRolesMode attribute and supporting 
code in Tomcat 8. Are they any objections (with alternative plans)?

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org