Index: lams_central/web/WEB-INF/web.xml
===================================================================
diff -u -rd6cc136dd301517f59c05b2ba254a4538dae65aa -r3eab31a1109437bc25679e6ebe38be0a350e17ac
--- lams_central/web/WEB-INF/web.xml	(.../web.xml)	(revision d6cc136dd301517f59c05b2ba254a4538dae65aa)
+++ lams_central/web/WEB-INF/web.xml	(.../web.xml)	(revision 3eab31a1109437bc25679e6ebe38be0a350e17ac)
@@ -653,9 +653,13 @@
 	<!-- Some constraints are based on DisplayGroupAction class -->
 	<security-constraint>
 		<web-resource-collection>
-			<web-resource-name>Organisation grouping</web-resource-name>
+			<web-resource-name>Any superuser content</web-resource-name>
 			<url-pattern>/groups.jsp</url-pattern>
 			<url-pattern>/orgGrouping.jsp</url-pattern>
+			<url-pattern>/qb/collection/*</url-pattern>
+			<url-pattern>/qb/stats/*</url-pattern>
+			<url-pattern>/questions/*</url-pattern>
+			<url-pattern>/xmlQuestions/*</url-pattern>
 			<http-method>GET</http-method>
  			<http-method>POST</http-method>
 		</web-resource-collection>
@@ -671,8 +675,6 @@
 			<web-resource-name>Monitor access</web-resource-name>
 			<url-pattern>/addLesson.jsp</url-pattern>
 			<url-pattern>/lti/addLesson.jsp</url-pattern>
-			<url-pattern>/qb/collection/*</url-pattern>
-			<url-pattern>/qb/stats/*</url-pattern>
 			<http-method>GET</http-method>
  			<http-method>POST</http-method>
 		</web-resource-collection>