I can't find anyplace that that these routines from Context are used:
public void addRoleMapping(String role, String link) public String findRoleMapping(String role) public void removeRoleMapping(String role) A grep through the dev archives shows that they used to be used in HttpRequestBase.isUserInRole(), but were removed and replaced with some similiar code that uses the Conext SecurityRole routines instead (see below for cvs notification). I get the <security-role-ref>/*SecurityRole() thing. Are the *RoleMapping() methods still used? If so, any hints as to how and where? --------------8<------------8<---------------------- craigmcc 01/03/26 12:02:17 Modified: catalina/src/share/org/apache/catalina/connector HttpRequestBase.java Log: Correct the implementation of HttpServletRequest.isUserInRole() so that it properly respects role name aliases defined with <security-role-ref>. PR: Bugzilla #1086 Submitted by: [EMAIL PROTECTED] -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>