Whitelist security constraint in web.xml

Question

I\'m using Tomcat for my Struts2 application. The web.xml has certain entries as shown below:

Answer 1

I would try the following:

    
        /*
        GET
        POST
    
    



    
        restricted methods
        /*
    
   

The first security-constraint does not have any auth-constraint, so the GET and POST methods are available to anyone without login. The second restricts other http methods for everybody. (I haven't tried it.)