security-constraint blocks welcome file with 403

[Greg Huber]

Hello,

If I add a security constrait to block direct access to jsp outside of
/WEB-INF/ it blocks the welcome-file with a 403.  Is there a caveat for
using this here?

<!-- Restricts access to pure JSP files - access available only via Struts
action -->
     <security-constraint>
         <display-name>No direct JSP access</display-name>
         <web-resource-collection>
             <web-resource-name>No-JSP</web-resource-name>
             <url-pattern>*.jsp</url-pattern>
         </web-resource-collection>
         <auth-constraint>
             <role-name>no-users</role-name>
         </auth-constraint>
     </security-constraint>

     <security-role>
         <description>Don't assign users to this role</description>
         <role-name>no-users</role-name>
     </security-role>

     <welcome-file-list>
         <welcome-file>WEB-INF/jsps/index.jsp</welcome-file>
     </welcome-file-list>

Cheers Greg