Servlet 3.1 has introduced the new special role of "**" to mean any authenticated user. With this new feature, Tomcat's allRolesMode attribute on the Realm is no longer necessary.

My preference is to remove the allRolesMode attribute and supporting code in Tomcat 8. Are they any objections (with alternative plans)?

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to