SecurityConstraint constraint = new SecurityConstraint();
constraint.setFallthrough(false);
if (emptyRoleSemantic == ServletSecurity.EmptyRoleSemantic.DENY) {
constraint.addConstraint(new PermitEmptyRolesConstraint(false));
} else if (roles.length == 0
&& transportGuarantee == ServletSecurity.TransportGuarantee.NONE) {
constraint.addConstraint(new PermitEmptyRolesConstraint(true));
} else {
for (String role : roles)
constraint.addRoleName(role);
if (transportGuarantee == ServletSecurity.TransportGuarantee.CONFIDENTIAL)
constraint.addConstraint(new TransportConstraint("CONFIDENTIAL"));
}
WebResourceCollection resources = new WebResourceCollection();
resources.addHttpMethod(httpMethodConstraintElement.getMethodName());
for (String pattern : patterns) {
resources.addURLPattern(pattern);
constraint.addURLPattern(pattern);
}
constraint.addWebResourceCollection(resources);
_constraintManager.addConstraint(constraint);
}
}
ServletSecurity.EmptyRoleSemantic emptyRoleSemantic
= securityElement.getEmptyRoleSemantic();
ServletSecurity.TransportGuarantee transportGuarantee
= securityElement.getTransportGuarantee();
String []roles = securityElement.getRolesAllowed();
SecurityConstraint constraint = new SecurityConstraint();
if (emptyRoleSemantic == ServletSecurity.EmptyRoleSemantic.DENY) {
constraint.addConstraint(new PermitEmptyRolesConstraint(false));
} else if (roles.length == 0
&& transportGuarantee == ServletSecurity.TransportGuarantee.NONE) {
constraint.addConstraint(new PermitEmptyRolesConstraint(true));
} else {
for (String role : roles)
constraint.addRoleName(role);
if (transportGuarantee