"<security-constraint>     <web-resource-collection>       <web-resource-name>HTML Manager interface (for humans)</web-resource-name>       <url-pattern>/html/*</url-pattern>     </web-resource-collection>     <auth-constraint>        <role-name>manager-gui</role-name>     </auth-constraint>   </security-constraint>   <security-constraint>     <web-resource-collection>       <web-resource-name>Text Manager interface (for scripts)</web-resource-name>       <url-pattern>/text/*</url-pattern>     </web-resource-collection>     <auth-constraint>        <role-name>manager-script</role-name>     </auth-constraint>   </security-constraint>   <security-constraint>     <web-resource-collection>       <web-resource-name>JMX Proxy interface</web-resource-name>       <url-pattern>/jmxproxy/*</url-pattern>     </web-resource-collection>     <auth-constraint>        <role-name>manager-jmx</role-name>     </auth-constraint>   </security-constraint>   <security-constraint>     <web-resource-collection>       <web-resource-name>Status interface</web-resource-name>       <url-pattern>/status/*</url-pattern>     </web-resource-collection>     <auth-constraint>        <role-name>manager-gui</role-name>        <role-name>manager-script</role-name>        <role-name>manager-jmx</role-name>        <role-name>manager-status</role-name>     </auth-constraint>   </security-constraint>