> From: Bijesh Vijayan [mailto:bije...@gmail.com] > Subject: auth-constraint
> I was having the following entry in my application web.xml in tomcat 5. You need to be precise when stating Tomcat versions; Tomcat 5.what.what? > <auth-constraint> > <role-name>*</role-name> > </auth-constraint> Let's look at section 12.7 of the servlet spec: "The special role name "*" is a shorthand for all role names defined in the deployment descriptor." > I was getting all the roles from the Database. Probably a bug in the version of Tomcat 5.?.? that you were using. See this bugzilla entry: https://issues.apache.org/bugzilla/show_bug.cgi?id=15570 > When I migrated to tomcat 7, I need to mention all the roles in > application web.xml. As the spec requires. - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org