Servlet 3.1 has introduced the new special role of "**" to mean any
authenticated user. With this new feature, Tomcat's allRolesMode
attribute on the Realm is no longer necessary.
My preference is to remove the allRolesMode attribute and supporting
code in Tomcat 8. Are they any objections (with alternative plans)?
Mark
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
