Index: lams_learning/conf/xdoclet/error-pages.xml
===================================================================
diff -u
--- lams_learning/conf/xdoclet/error-pages.xml	(revision 0)
+++ lams_learning/conf/xdoclet/error-pages.xml	(revision 01e9227db8d63e8273bb20a34ec2ffa9d8458d60)
@@ -0,0 +1,4 @@
+<error-page>
+	<error-code>403</error-code>
+	<location>/403.html</location>
+</error-page>  
\ No newline at end of file
Index: lams_learning/conf/xdoclet/web-security.xml
===================================================================
diff -u
--- lams_learning/conf/xdoclet/web-security.xml	(revision 0)
+++ lams_learning/conf/xdoclet/web-security.xml	(revision 01e9227db8d63e8273bb20a34ec2ffa9d8458d60)
@@ -0,0 +1,39 @@
+	<!--  Security Constraint -->
+	<security-constraint>
+	   	<web-resource-collection>
+	    	<web-resource-name>Secure Content</web-resource-name>
+			<url-pattern>/*</url-pattern>
+    	</web-resource-collection>
+    	<auth-constraint>
+    		<role-name>LEARNER</role-name>
+    		<role-name>TEACHER</role-name>
+    		<role-name>STAFF</role-name>
+    		<role-name>AUTHOR</role-name>
+    		<role-name>ADMIN</role-name>
+    		<role-name>SYSADMIN</role-name>
+    	</auth-constraint>
+    </security-constraint>
+
+    <security-constraint>
+	   	<web-resource-collection>
+	    	<web-resource-name>Export</web-resource-name>
+		    <url-pattern>/portfolioExport</url-pattern>
+		    
+		 </web-resource-collection>
+    	<auth-constraint>
+    		<role-name>AUTHOR</role-name> <!-- have to change this to TEACHER have it as AUTHOR so that I can test it with user mmm -->
+			<role-name>LEARNER</role-name>
+    	</auth-constraint>
+    </security-constraint>
+    
+     
+  
+
+	<!--  Login Configuration -->
+  	<login-config>
+   		<auth-method>FORM</auth-method>
+		<realm-name>LAMS</realm-name>
+   		<form-login-config>
+    		<form-login-page>/login.jsp</form-login-page>
+   		</form-login-config>
+   	</login-config>