Chapter 12. Play with different <auth-constraint> and <role-name>
Chapter 12. Programatic security and <security-role-ref> element of servlet