[Bug 55477] Add a solution to map a realm name to a security role

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[Bug 55477] Add a solution to map a realm name to a security role

Bugzilla from bugzilla@apache.org
https://bz.apache.org/bugzilla/show_bug.cgi?id=55477

--- Comment #14 from Michael Osipov <[hidden email]> ---
(In reply to Christopher Schultz from comment #13)

> (In reply to Michael Osipov from comment #12)
> > I am not convinced by that approach.
>
> Which approach? RealmBase? Context.addRoleMapping?
>
> > I have provided a possible idea which decoupled from the realm.
>
> Is there a patch or PR somewhere? Or already committed?
>
> > I want to pick this up b/c I have am already using a mapping feature.
>
> Sounds good to me.

I don't like the approach tying the mapping to the realm as depicted by you or
Stefan. Consider that a realm is not always bound to a context, maybe also be
in the server.xml.

I have been using this:
http://mo-tomcat-ext.sourceforge.net/apidocs/net/sf/michaelo/tomcat/extras/listeners/PropertiesRoleMappingListener.html
for years. I am not certain whether it should remain a listener or should be a
new configuration element in the context.xml. I think this discussion must
happen on the dev list.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]