I'd really appreciate your taking a look at the following issues before 7.0.3, 
in this order of priority.

49952 ServletContainerInitializer can't actually add listeners 
this is an obvious bug with a simple fix and a new testcase.

50015 dynamic servlet security incomplete and badly distributed 
There's some major application logic in ApplicationServletRegistration and 
there aren't enough notifications to  StandardContext for createServlet and 
addServlet calls to ServletContext to easily implement the spec required 
behavior for @ServletSecurity annotation scanning for dynamically added 
servlets.  This patch doesn't implement much missing behavior but puts in some 
methods in ServletContext that allow subclasses to implement the spec behavior 
easily.  If someone expresses some interest and there are a couple days I could 
try to provide a tomcat implementation of the missing beahvior.

50016 bad division of responsibility around isUserInRole and new Request login 
and logout methods
There's some code in Request that I think should be in Realm, the 
authenticators, or Wrapper.

49916 use an init-param for jspFile on explicit jsp servlets
This provides what I think is a significant code simplification and has a 
better division of responsibility for proecessing and running jsps.

49937 Problems with AsyncListener and resource injection
This one is probably controversial since the spec is contradictory on the 
subject.

thanks
david jencks


On Sep 27, 2010, at 5:16 AM, Mark Thomas wrote:

> On 27/09/2010 13:13, ma...@apache.org wrote:
>> Author: markt
>> Date: Mon Sep 27 12:13:32 2010
>> New Revision: 1001698
> <snip/>
>> The following work remains:
>> - Testing all connectors (HTTP and AJP) with TCK + security manager and 
>> fixing whatever is broken
> 
> Just as soon as I get this done, I plan to roll a 7.0.3 release.
> Hopefully this week although given how long it took me to get this
> commit ready...
> 
> Mark
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: dev-h...@tomcat.apache.org
> 

Reply via email to