IBM WebSphere V5.0 Security - CGISecurity

8. Add the GET and POST HTTP methods to the list.
9. Next to URLs, click Add. You will be presented with the Add URLs entry box.
10.Add the following URL patterns:
/transfer/customertransfer.html
/transfer/transferresults.jsp
/serlvets/Transfer
Click OK.
The final result of the resource collection for the security constraint definition is
shown next.
Figure 4-8 Security constraints resource collection definition
Securing components using WebSphere Studio
The approach to defining security constraints in WebSphere Studio Application
Developer is very similar to the one described above. In order to perform the
same task for Transfer servlet security constraint, follow these steps:
1. Open or select the J2EE perspective, and switch to the J2EE Hierarchy view.
2. Open the Web Modules folder, then double-click the itsobankWeb item. This
will open the editor with the Web deployment descriptor. Switch to the
Security tab.
3. Define a new security constraint, select Security Constraints tab at the top
of the editor, then click the Add button under the Security Constraints window
54 IBM WebSphere V5.0 Security Handbook