In order to disable TRACE requests, set the "traceEnabled" property of the <http-service> element in domain.xml to "false".
In order to disable any of the other request methods, use a filter.
[Message sent by forum member 'jluehe' (jluehe)]
http://forums.java.net/jive/thread.jspa?messageID=283423