title: Authentication without Role in web.xml in JBoss AS 7
body: <p>For a RESTful enterprise application I need all calls to be authenticated, but I cannot provide a common group/rolt that all users of the system have. I authenticate and authorize over LDAP (which should not make a difference for this issue).</p>
  
  <p>If I leave the elements commented out as in the web.xml below, I do not get any authentication at all. How can I have authentication without the need of a common role? Also, an empty auth-consraint does not work.</p>
  
  <pre><code>&lt;?xml version="1.0" encoding="UTF-8"?&gt;
  &lt;web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
      xsi:schemaLocation=" http://java.sun.com/xml/ns/javaee       http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"&gt;
      &lt;context-param&gt;
          &lt;!-- fpe: This one is necessary. --&gt;
          &lt;param-name&gt;resteasy.role.based.security&lt;/param-name&gt;
          &lt;param-value&gt;true&lt;/param-value&gt;
      &lt;/context-param&gt;
      &lt;security-constraint&gt;
          &lt;web-resource-collection&gt;
              &lt;web-resource-name&gt;Resteasy&lt;/web-resource-name&gt;
              &lt;url-pattern&gt;/*&lt;/url-pattern&gt;
              &lt;http-method&gt;GET&lt;/http-method&gt;
              &lt;http-method&gt;POST&lt;/http-method&gt;
              &lt;http-method&gt;PUT&lt;/http-method&gt;
              &lt;http-method&gt;DELETE&lt;/http-method&gt;
          &lt;/web-resource-collection&gt;
  &lt;!--        &lt;auth-constraint&gt; --&gt;
  &lt;!--            &lt;role-name&gt;*&lt;/role-name&gt; --&gt;
  &lt;!--        &lt;/auth-constraint&gt; --&gt;
          &lt;user-data-constraint&gt;
              &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
          &lt;/user-data-constraint&gt;
      &lt;/security-constraint&gt;
      &lt;login-config&gt;
          &lt;auth-method&gt;BASIC&lt;/auth-method&gt;
          &lt;realm-name&gt;Login&lt;/realm-name&gt;
      &lt;/login-config&gt;
  &lt;!--    &lt;security-role&gt; --&gt;
  &lt;!--        &lt;role-name&gt;the_common_role&lt;/role-name&gt; --&gt;
  &lt;!--    &lt;/security-role&gt; --&gt;
  &lt;/web-app&gt;
  </code></pre>