https://bz.apache.org/bugzilla/show_bug.cgi?id=63982
--- Comment #5 from Michael Osipov <micha...@apache.org> --- (In reply to Mark Thomas from comment #4) > (In reply to Michael Osipov from comment #3) > > Even if, it has to be supported until Tomcat 10. Do you consider returning > > null is better here? That would make like in CombinedRealm easier. > > It has to be present until Tomcat 10. The code is unused (by Tomcat). I > think it is better to leave the code as is - apart from adding a deprecation > marker. I don't think now is the time to be changing the behaviour of that > method. Even if the behavior is not documented and an implementation detail? How would you properly call #getRoles() from the CombinedRealm then? -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org