In your web.xml i see the following :
<auth-constraint>
<role-name>USERS</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>file</realm-name>
</login-config>
<security-role>
<role-name>USER</role-name>
</security-role>
Can you change the role-name under security-role element to match the role-name used in auth-constraint and the role-name used in sun-web.xml.
make it :
<security-role>
<role-name>USERS</role-name>
</security-role>
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]
http://forums.java.net/jive/thread.jspa?messageID=266271