Description
Currently there is nothing stopping you from having a default-role or a principal mapped role in the geronimo security descriptor that is not present in the roles listed in the j2ee deployment descriptors. I think it would be useful to check on this and at least print a loud warning, or throw a deployment exception.
Attachments
Issue Links
- is related to
-
GERONIMO-4155 Can use a run-as role without defining it
-
- Closed
-