title: user-data-constraint is not working
body: <p>I am trying to do what ever is explained in here <a href="http://middlewaremagic.com/weblogic/?p=2019." rel="nofollow">http://middlewaremagic.com/weblogic/?p=2019</a></p>
  
  <p>My web.xml has this entry
   <code>&lt;security-constraint&gt;
          &lt;web-resource-collection&gt;
              &lt;web-resource-name&gt;Secure pipeline&lt;/web-resource-name&gt;
              &lt;description&gt;&lt;/description&gt;
              &lt;url-pattern&gt;/activity/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/image/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/script/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/style/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/stylesheet/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/page/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/infra/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/calendar/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/async/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/ajax/*&lt;/url-pattern&gt;
              &lt;url-pattern&gt;/perfLog/report&lt;/url-pattern&gt;
          &lt;/web-resource-collection&gt;
          &lt;auth-constraint&gt;
              &lt;description&gt;&lt;/description&gt;
              &lt;role-name&gt;authenticated&lt;/role-name&gt;
          &lt;/auth-constraint&gt;
          &lt;user-data-constraint&gt;
              &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
          &lt;/user-data-constraint&gt;
      &lt;/security-constraint&gt;</code></p>
  
  <p>When I run the server i get this - </p>
  
  <pre><code>Error 403--Forbidden
  </code></pre>
  
  <p>From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
  10.4.4 403 Forbidden</p>
  
  <p>The server understood the request, but is refusing to fulfill it. Authorization will not help and the request SHOULD NOT be repeated. If the request method was not HEAD and the server wishes to make public why the request has not been fulfilled, it SHOULD describe the reason for the refusal in the entity. This status code is commonly used when the server does not wish to reveal exactly why the request has been refused, or when no other response is applicable.</p>
  
  <p>I am very new to this. Any idea/suggestion will help.</p>
  
  <p>Thanks.</p>