> > > > Would it be possible for you to set up a simple test case and package > > it as a WAR? Also, write-up a set of URLs and your expectations about > > whether they should work or not and attach all that to a Bugzilla > > report: > > https://issues.apache.org/bugzilla/enter_bug.cgi?product=Tomcat%207 > > > > > Sure, I will do so.
The issue is actually due to a bug [1] in the initialization of some data structure holding security constraints. It has already been fixed in trunk and the fix will be part of 7.0.30. --Matteo [1] https://issues.apache.org/bugzilla/show_bug.cgi?id=53801
