Index: lams_tool_laqa/test/web/WEB-INF/web.xml
===================================================================
diff -u -r5f015bed03f28f95ee08f3c03a1f3f03254cf426 -r664a5459e87fdfde268c9c54e458618c0965f816
--- lams_tool_laqa/test/web/WEB-INF/web.xml	(.../web.xml)	(revision 5f015bed03f28f95ee08f3c03a1f3f03254cf426)
+++ lams_tool_laqa/test/web/WEB-INF/web.xml	(.../web.xml)	(revision 664a5459e87fdfde268c9c54e458618c0965f816)
@@ -24,7 +24,42 @@
 			org.springframework.web.context.ContextLoaderListener
 		</listener-class>
 	</listener>	
+<!-- 	
+	<filter>
+    <filter-name>contentFilter</filter-name>
+    <filter-class>org.lamsfoundation.lams.web.filter.ResponseCaptureFilter</filter-class>
+	</filter>
 
+	<filter-mapping>
+	    <filter-name>contentFilter</filter-name>
+	    <url-pattern>/portfolioExport</url-pattern>
+	</filter-mapping> -->
+   <!-- System session filter -->
+   <filter>
+       <filter-name>SystemSessionFilter</filter-name>
+         <filter-class>
+		   org.lamsfoundation.lams.web.session.SystemSessionFilter
+         </filter-class>
+     </filter>
+
+    <filter-mapping>
+ 	   <filter-name>SystemSessionFilter</filter-name>
+    	 <url-pattern>/*</url-pattern>
+   </filter-mapping>	
+   
+   <!--  Servlet defination -->
+	<servlet>
+		<servlet-name>exportPortfolio</servlet-name>
+		<display-name>Export Portfolio</display-name>
+		<description>Export Portfolio</description>		
+		<servlet-class>org.lamsfoundation.lams.tool.qa.web.QaExportServlet</servlet-class>
+	</servlet>
+	
+	<servlet-mapping>
+		<servlet-name>exportPortfolio</servlet-name>
+		<url-pattern>/portfolioExport</url-pattern>
+  	</servlet-mapping>
+
     <!--
     To use non XDoclet filters, create a filters.xml file that
     contains the additional filters (eg Sitemesh) and place it in your
@@ -114,6 +149,11 @@
       <session-timeout>120</session-timeout>
    </session-config>
    
+     <error-page>
+	<error-code>403</error-code>
+	<location>/403.html</location>
+</error-page>
+   
    <taglib>
     <taglib-uri>fck-editor</taglib-uri>
     <taglib-location>/WEB-INF/fckeditor/tlds/FCKeditor.tld</taglib-location>
@@ -157,5 +197,69 @@
    <!ELEMENT form-login-page (#PCDATA)>
    <!ELEMENT form-error-page (#PCDATA)>
    -->
+   
+   <!--  Security Constraint -->
+	<security-constraint>
+	   	<web-resource-collection>
+	    	<web-resource-name>Secure Content</web-resource-name>
+			<url-pattern>/*</url-pattern>
+    	</web-resource-collection>
+    	<auth-constraint>
+    		<role-name>LEARNER</role-name>
+    		<role-name>TEACHER</role-name>
+    		<role-name>STAFF</role-name>
+    		<role-name>AUTHOR</role-name>
+    		<role-name>ADMIN</role-name>
+    		<role-name>SYSADMIN</role-name>
+    	</auth-constraint>
+    </security-constraint>
 
+    <security-constraint>
+	   	<web-resource-collection>
+	    	<web-resource-name>Authoring Update</web-resource-name>
+		    <url-pattern>/authoringStarter.do</url-pattern>
+		   <url-pattern>/authoring.do</url-pattern>
+		 </web-resource-collection>
+    	<auth-constraint>
+    		<role-name>AUTHOR</role-name>
+    	</auth-constraint>
+    </security-constraint>
+    
+    
+    <security-constraint>
+	   	<web-resource-collection>
+	    	<web-resource-name>Staff Content</web-resource-name>
+		    <url-pattern>/monitoringStarter.do</url-pattern>
+		    <url-pattern>/monitoring.do</url-pattern>		   
+    	</web-resource-collection>
+    	<auth-constraint>
+    		<role-name>STAFF</role-name>
+    	</auth-constraint>
+    </security-constraint>
+
+    
+	<!--  some combine role security setting -->
+    <security-constraint>
+	   	<web-resource-collection>
+	    	<web-resource-name>Download Files</web-resource-name>
+		    <url-pattern>/download/</url-pattern>
+    	</web-resource-collection>
+    	<auth-constraint>
+    		<role-name>AUTHOR</role-name>
+    		<role-name>STAFF</role-name>
+    		<role-name>ADMIN</role-name>
+    		<role-name>SYSADMIN</role-name>
+    	</auth-constraint>
+    </security-constraint>
+
+	<!--  Login Configuration -->
+  	<login-config>
+   		<auth-method>FORM</auth-method>
+		<realm-name>LAMS</realm-name>
+   		<form-login-config>
+    		<form-login-page>/login.jsp</form-login-page>
+   		</form-login-config>
+   	</login-config>
+   
+
 </web-app>