I have the following security constraint specified in my web.xml:



<security-constraint>

  <web-resource-collection>

    <web-resource-name>Customer Area</web-resource-name>

    <url-pattern>/customer/*</url-pattern>

  </web-resource-collection>

  <auth-constraint>

    <role-name>customer</role-name>

  </auth-constraint>

</security-constraint>



When I go to the following url it gets blocked.



http://phase.zapto.org:8282/customer.do



I'm assuming this is a bug. Is it not?



I'm using Tomcat 5.0.18



Brandon Goodin