This annotation specifies the security constraints of the HTTP method.

(a) The following table lists the @HttpMethodConstraint attributes.

Attribute name	Functionality
value	This attribute specifies the HTTP method that applies security constraints.
emptyRoleSemantic	This attribute specifies the behavior when the role is not specified.
rolesAllowed	This attribute specifies the list of user names used for authentication.
transportGuarantee	This attribute specifies the method to communicate between the client and server.

Details of each attribute are as follows:

(b) value attribute

Type

String

Description

This attribute specifies the HTTP method that applies security constraints.

Default value

None

(c) emptyRoleSemantic attribute

Type

ServletSecurity.EmptyRoleSemantic

Description

This attribute specifies the behavior when the role is not specified.

Default value

javax.servlet.annotation.ServletSecurity.

EmptyRoleSemantic.

PERMIT

(d) rolesAllowed attribute

Type

String[]

Description

This attribute specifies the list of user names used for authentication.

Default value

{}

(e) transportGuarantee attribute

Type

ServletSecurity.TransportGuarantee

Description

This attribute specifies the method to communicate between the client and server.

Default value

javax.servlet.annotation.ServletSecurity.

TransportGuarantee.

NONE