https://issues.apache.org/bugzilla/show_bug.cgi?id=53047
--- Comment #6 from Mark Thomas <ma...@apache.org> --- It isn't quite that simple. The application may still make a call to isUserInRole(). There may well be a special case for each realm if all of the following are true: - AUTH_ONLY_MODE or STRICT_AUTH_ONLY_MODE - the Realm uses separate attributes to define the role store - the role store attributes are undefined In this case, there is no need to look up the roles although an INFO log message on Realm start just to remind the admin what is going on wouldn't hurt. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org