The allRolesMode feature is described in http://jira.jboss.com/jira/browse/JBAS-2926.

In the server.xml the org.jboss.web.tomcat.security.JaccAuthorizationRealm is documented to provide an attribute named allRolesMode. The attribute is inherited from the parent class JbossSecurityMgrRealm but this attribute has no meaning for JaccAuthorizationRealm. I know it is not easy to provide this features for jacc but at least the xml comment has to be fixed and it has to be mentioned that this feature is not possible with jacc.

I have posted in http://jira.jboss.com/jira/browse/JBAS-1824 (JACC: <role-name>*</role-name> in web.xml) a possible solution as a comment. Please take also a look a that when fixing this issue.