Security access

From Null-pointer

in the web.xml

<security-constraint>
 <display-name>Security Constraint</display-name>
  <web-resource-collection>
  <web-resource-name>Protected Area</web-resource-name>
   <url-pattern>/*</url-pattern>
  </web-resource-collection>
  <auth-constraint>
   <role-name>admin</role-name>
   <role-name>tomcat</role-name>
  </auth-constraint>
 </security-constraint>
<login-config>
 <auth-method>BASIC</auth-method>
 <realm-name>Basic Auth</realm-name>
</login-config>
<security-role>
  <role-name>admin</role-name>
</security-role>
<security-role>
 <role-name>tomcat</role-name>
</security-role>