IBM WebSphere V5.0 Security - CGISecurity

8. Next to HTTP Methods click Add. You will be presented with the Add HTTP
methods dialog box.
9. Add the GET and POST HTTP methods to the list.
10.Next to URLs, click Add. You will be presented with the Add URLs entry box.
11.Add the following URL patterns:
/index.html
/error/*
/images/*
/login/*
/style/*
Click OK.
The final result of the resource collection for the security constraint definition is
shown next.
Figure 4-7 Security constraints resource collection definition
4.3.2 Servlets and JSPs
WebSphere Application Server can secure dynamic resources such as servlets
using role-based declarative security mechanisms. This means that the logical
application security structure is defined independently from the application itself.
The logical security structure is stored in deployment descriptors of the
application.
52 IBM WebSphere V5.0 Security Handbook