configuration - Purpose of roles tags in tomcat-users.xml? -

configuration - Purpose of roles tags in tomcat-users.xml? -

in tomcat 7 tomcat-users.xml file, purpose served <role /> tags?

for xampp instance of tomcat 7, i've figured out how configure tomcat-users.xml file permit me access both tomcat web application manager , tomcat virtual host manager. more specifically, next enables aforementioned access:

<tomcat-users> <user username="uname" password="pword" roles="manager-gui,admin-gui"/> </tomcat-users>

note what's not in successful snippet of xml <role /> tags. that's crux of question: can't life of me figure out purpose role tags meant serve.

in pursuit of learning how configure access, i've read plenty of documentation , forum postings, seem go in circle: 1 can define roles, roles don't seem define useful(?)

for example, here's recurring illustration used in both tomcat-users.xml file , in numerous forum posts "explaining" utilize of roles.

<tomcat-users> <role rolename="tomcat"/> <user username="uname" password="pword" roles="tomcat"/> </tomcat-users>

okay, in "explanation" role element defines rolename attribute equal tomcat, user element contains roles attribute defines user's role tomcat. what's point?

asked way, given in role element rolename attrbute defines tomcat, roles=tomcat what, exactly? compared working user definition of manager-gui , admin-gui define roles enable tomcat web application manager , tomcat virtual host manager access.

cheers & thanks, riley sfo

the utilize of <role .../> element in tomcat-users.xml optional. tomcat builds list of roles <role .../> elements , roles named in roles="..." attribute of users.

the benefit of using <role .../> element can declare finish set of supported roles , can include description attribute describing role.

as aside, tomcat-users.xml supports groups although not shown in illustration ships default tomcat. groups sets of roles can assigned users.

tomcat configuration tomcat7