webservices/server-integration/src/main/java/org/jboss/as/webservices/tomcat/WebMetaDataCreator.java
private void createSecurityConstraints(final Deployment dep, final JBossWebMetaData jbossWebMD) {
         WSLogger.ROOT_LOGGER.trace("Creating security constraints");
        for (final Endpoint ejbEndpoint : dep.getService().getEndpoints()) {
            final boolean secureWsdlAccess = ejb3SecurityAccessor.isSecureWsdlAccess(ejbEndpoint);
            final String transportGuarantee = ejb3SecurityAccessor.getTransportGuarantee(ejbEndpoint);
            final boolean hasTransportGuarantee = transportGuarantee != null;
            final String authMethod = ejb3SecurityAccessor.getAuthMethod(ejbEndpoint);
            final boolean hasAuthMethod = authMethod != null;

            if (ejbEndpoint instanceof HttpEndpoint && (hasAuthMethod || hasTransportGuarantee)) {
                final List<SecurityConstraintMetaData> securityConstraints = WebMetaDataHelper
                        .getSecurityConstraints(jbossWebMD);

                // security-constraint
                final SecurityConstraintMetaData securityConstraint = WebMetaDataHelper
                        .newSecurityConstraint(securityConstraints);

                // web-resource-collection
                final WebResourceCollectionsMetaData webResourceCollections = WebMetaDataHelper
                        .getWebResourceCollections(securityConstraint);
                final String endpointName = ejbEndpoint.getShortName();
                final String urlPattern = ((HttpEndpoint) ejbEndpoint).getURLPattern();
                 WSLogger.ROOT_LOGGER.tracef("Creating web resource collection for endpoint: %s, URL pattern: %s", endpointName, urlPattern);
                WebMetaDataHelper.newWebResourceCollection(endpointName, urlPattern, secureWsdlAccess,
                        webResourceCollections);

                // auth-constraint
                if (hasAuthMethod) {
                     WSLogger.ROOT_LOGGER.tracef("Creating auth constraint for endpoint: %s", endpointName);
                    WebMetaDataHelper.newAuthConstraint(WebMetaDataHelper.getAllRoles(), securityConstraint);
                }

                // user-data-constraint
                if (hasTransportGuarantee) {
                     WSLogger.ROOT_LOGGER.tracef("Creating new user data constraint for endpoint: %s, transport guarantee: %s", endpointName, transportGuarantee);
                    WebMetaDataHelper.newUserDataConstraint(transportGuarantee, securityConstraint);
                }
            }
        }
    }
private void createSecurityConstraints(final Deployment dep, final JBossWebMetaData jbossWebMD) {
         WSLogger.ROOT_LOGGER.trace("Creating security constraints");
        for (final Endpoint ejbEndpoint : dep.getService().getEndpoints()) {
            final boolean secureWsdlAccess = ejb3SecurityAccessor.isSecureWsdlAccess(ejbEndpoint);
            final String transportGuarantee = ejb3SecurityAccessor.getTransportGuarantee(ejbEndpoint);
            final boolean hasTransportGuarantee = transportGuarantee != null;
            final String authMethod = ejb3SecurityAccessor.getAuthMethod(ejbEndpoint);
            final boolean hasAuthMethod = authMethod != null;

            if (ejbEndpoint instanceof HttpEndpoint && (hasAuthMethod || hasTransportGuarantee)) {
                final List<SecurityConstraintMetaData> securityConstraints = WebMetaDataHelper
                        .getSecurityConstraints(jbossWebMD);

                // security-constraint
                final SecurityConstraintMetaData securityConstraint = WebMetaDataHelper
                        .newSecurityConstraint(securityConstraints);

                // web-resource-collection
                final WebResourceCollectionsMetaData webResourceCollections = WebMetaDataHelper
                        .getWebResourceCollections(securityConstraint);
                final String endpointName = ejbEndpoint.getShortName();
                final String urlPattern = ((HttpEndpoint) ejbEndpoint).getURLPattern();
                 WSLogger.ROOT_LOGGER.tracef("Creating web resource collection for endpoint: %s, URL pattern: %s", endpointName, urlPattern);
                WebMetaDataHelper.newWebResourceCollection(endpointName, urlPattern, secureWsdlAccess,
                        webResourceCollections);

                // auth-constraint
                if (hasAuthMethod) {
                     WSLogger.ROOT_LOGGER.tracef("Creating auth constraint for endpoint: %s", endpointName);
                    WebMetaDataHelper.newAuthConstraint(WebMetaDataHelper.getAllRoles(), securityConstraint);
                }

                // user-data-constraint
                if (hasTransportGuarantee) {
                     WSLogger.ROOT_LOGGER.tracef("Creating new user data constraint for endpoint: %s, transport guarantee: %s", endpointName, transportGuarantee);
                    WebMetaDataHelper.newUserDataConstraint(transportGuarantee, securityConstraint);
                }
            }
        }
    }
private void createSecurityConstraints ( final Deployment dep , final JBossWebMetaData jbossWebMD ) { WSLogger . ROOT_LOGGER . trace ( "Creating security constraints" ) ; for ( final Endpoint ejbEndpoint : dep . getService ( ) . getEndpoints ( ) ) { final boolean secureWsdlAccess = ejb3SecurityAccessor . isSecureWsdlAccess ( ejbEndpoint ) ; final String transportGuarantee = ejb3SecurityAccessor . getTransportGuarantee ( ejbEndpoint ) ; final boolean hasTransportGuarantee = transportGuarantee != null ; final String authMethod = ejb3SecurityAccessor . getAuthMethod ( ejbEndpoint ) ; final boolean hasAuthMethod = authMethod != null ; if ( ejbEndpoint instanceof HttpEndpoint && ( hasAuthMethod || hasTransportGuarantee ) ) { final List < SecurityConstraintMetaData > securityConstraints = WebMetaDataHelper . getSecurityConstraints ( jbossWebMD ) ; // security-constraint final SecurityConstraintMetaData securityConstraint = WebMetaDataHelper . newSecurityConstraint ( securityConstraints ) ; // web-resource-collection final WebResourceCollectionsMetaData webResourceCollections = WebMetaDataHelper . getWebResourceCollections ( securityConstraint ) ; final String endpointName = ejbEndpoint . getShortName ( ) ; final String urlPattern = ( ( HttpEndpoint ) ejbEndpoint ) . getURLPattern ( ) ; WSLogger . ROOT_LOGGER . tracef ( "Creating web resource collection for endpoint: %s, URL pattern: %s" , endpointName , urlPattern ) ; WebMetaDataHelper . newWebResourceCollection ( endpointName , urlPattern , secureWsdlAccess , webResourceCollections ) ; // auth-constraint if ( hasAuthMethod ) { WSLogger . ROOT_LOGGER . tracef ( "Creating auth constraint for endpoint: %s" , endpointName ) ; WebMetaDataHelper . newAuthConstraint ( WebMetaDataHelper . getAllRoles ( ) , securityConstraint ) ; } // user-data-constraint if ( hasTransportGuarantee ) { WSLogger . ROOT_LOGGER . tracef ( "Creating new user data constraint for endpoint: %s, transport guarantee: %s" , endpointName , transportGuarantee ) ; WebMetaDataHelper . newUserDataConstraint ( transportGuarantee , securityConstraint ) ; } } } }
Creates security constraints part of web.xml descriptor.
<p/>
<pre>
&lt;security-constraint&gt;
&lt;web-resource-collection&gt;
&lt;web-resource-name&gt;EJBEndpointShortName&lt;/web-resource-name&gt;
&lt;url-pattern&gt;EJBEndpointURLPattern&lt;/url-pattern&gt;
&lt;http-method&gt;GET&lt;/http-method&gt;
&lt;http-method&gt;POST&lt;/http-method&gt;
&lt;/web-resource-collection&gt;
&lt;auth-constraint&gt;
&lt;role-name&gt;*&lt;/role-name&gt;
&lt;/auth-constraint&gt;
&lt;user-data-constraint&gt;
&lt;transport-guarantee&gt;EjbTransportGuarantee&lt;/transport-guarantee&gt;
&lt;/user-data-constraint&gt;
&lt;/security-constraint&gt;
</pre>

@param dep        webservice deployment
@param jbossWebMD jboss web meta data
Creates security constraints part of web . xml descriptor . <p / > <pre > &lt ; security - constraint&gt ; &lt ; web - resource - collection&gt ; &lt ; web - resource - name&gt ; EJBEndpointShortName&lt ; / web - resource - name&gt ; &lt ; url - pattern&gt ; EJBEndpointURLPattern&lt ; / url - pattern&gt ; &lt ; http - method&gt ; GET&lt ; / http - method&gt ; &lt ; http - method&gt ; POST&lt ; / http - method&gt ; &lt ; / web - resource - collection&gt ; &lt ; auth - constraint&gt ; &lt ; role - name&gt ; * &lt ; / role - name&gt ; &lt ; / auth - constraint&gt ; &lt ; user - data - constraint&gt ; &lt ; transport - guarantee&gt ; EjbTransportGuarantee&lt ; / transport - guarantee&gt ; &lt ; / user - data - constraint&gt ; &lt ; / security - constraint&gt ; < / pre >