https://bz.apache.org/bugzilla/show_bug.cgi?id=63505
--- Comment #7 from Mark Thomas <ma...@apache.org> --- I agree we need to deprecate the JDBCREalm although that is a little off-topic here. I think we need: - a (non-abstract?) base class that uses PreparedStatements - a concrete implementation as per the current DataSourceRealm that extends the base class and builds the PreparedStatements from table and column names - a concrete implementation that extends the base class and builds the PreparedStatements from stored procedure names (since CallableStatement extends PreparedStatement) Having all three classes as concrete realm implementations would allow maximum flexibility (and maximum opportunity to shoot yourself in the foot). -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org