WebMetaData webApp = unmarshal();
List<SecurityConstraintMetaData> scs = webApp.getSecurityContraints();
assertEquals(8, scs.size());
// SC1
SecurityConstraintMetaData sc1 = scs.get(0);
WebResourceCollectionsMetaData sc1WRC = sc1.getResourceCollections();
assertEquals(2, sc1WRC.size());
WebResourceCollectionMetaData sc1WRC1 = sc1WRC.get(0);
assertEquals(Collections.emptyList(), sc1WRC1.getHttpMethods());
List<String> sc1WRC1URLs = sc1WRC1.getUrlPatterns();
assertEquals(4, sc1WRC1URLs.size());
assertEquals("/excluded/*", sc1WRC1URLs.get(0));
assertEquals("/restricted/get-only/excluded/*", sc1WRC1URLs.get(1));
assertEquals("/restricted/post-only/excluded/*", sc1WRC1URLs.get(2));
assertEquals("/restricted/any/excluded/*", sc1WRC1URLs.get(3));
WebResourceCollectionMetaData sc1WRC2 = sc1WRC.get(1);
List<String> sc1WRC2URLs = sc1WRC2.getUrlPatterns();
assertEquals(1, sc1WRC2URLs.size());
assertEquals("/restricted/*", sc1WRC2URLs.get(0));
List<String> sc1WRC2Http = sc1WRC2.getHttpMethods();
ArrayList<String> sc1WRC2HttpExpected = new ArrayList<String>();