How do I set up Embedded Tomcat to override the Security Constraints set in the web.xml file using the catalina.deploy.SecurityConstaint class?

[Lisa Balducci]

I am trying to override the web.xml SecurityConstraints using the
Context addConstraint/removeConstraint methods.  The context.xml
contains the following element
<WatchedResource>WEB-INF/web.xml</WatchedResource>

 I tried the following to override the SecurityConstraints:   

             // adding the authConstraint  

               SecurityConstraint sc = new SecurityConstraint();


              sc.setAuthConstraint(false);

             

I've tried to use both the addConstraint(sc) and removeConstraint(sc)
methods to remove the auth-constraint element.      

              context.addConstraint(sc);  

 

             host.addChild(context);

 

The methods are set correctly but the web.xml security constraints
overrides these security constraint changes.  Is there a way to override
the web.xml security constraints using the
catalina.deploy.SecurityConstaint and Context methods?    

 

 

Lisa