<!-- (JBAS-1824) The jacc-star-role-allow element specifies whether the
jacc permission generating agent in the web layer needs to generate a
WebResourcePermission(url,null) permission such that the jacc provider can
make a decision as to bypass authorization or not.
-->
<!ELEMENT jacc-star-role-allow (#PCDATA)>

This is present in Branch 4_2: http://anonsvn.jboss.org/repos/jbossas/branches/Branch_4_2/server/src/resources/dtd/jboss-web_4_2.dtd

This may have been a mistake by me when I finished JBAS-1824 that I did not update AS trunk schemas.

jboss_web_5_0.dtd also needs an update.