We used to have allRolesMode attribute in AS6 to allow users to define default allRolesMode for JBossWebRealm.