Index: lams_tool_dimdim/web/WEB-INF/web.xml
===================================================================
diff -u -rf695bff519bc7847be4fba2800f633986dbb3310 -r1e7cc329c4fa2c810ac4438dc334f8c1d44639a4
--- lams_tool_dimdim/web/WEB-INF/web.xml	(.../web.xml)	(revision f695bff519bc7847be4fba2800f633986dbb3310)
+++ lams_tool_dimdim/web/WEB-INF/web.xml	(.../web.xml)	(revision 1e7cc329c4fa2c810ac4438dc334f8c1d44639a4)
@@ -57,10 +57,14 @@
 		<url-pattern>*.do</url-pattern>
 	</servlet-mapping>
 
+	<deny-uncovered-http-methods />
+	
 	<security-constraint>
 		<web-resource-collection>
 			<web-resource-name>Public content</web-resource-name>
 			<url-pattern>/*</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 	</security-constraint>
 </web-app>
\ No newline at end of file
Index: lams_tool_doku/web/WEB-INF/web.xml
===================================================================
diff -u -rd6fa07234d396367e63b1b59db70e70d0e7ccb60 -r1e7cc329c4fa2c810ac4438dc334f8c1d44639a4
--- lams_tool_doku/web/WEB-INF/web.xml	(.../web.xml)	(revision d6fa07234d396367e63b1b59db70e70d0e7ccb60)
+++ lams_tool_doku/web/WEB-INF/web.xml	(.../web.xml)	(revision 1e7cc329c4fa2c810ac4438dc334f8c1d44639a4)
@@ -203,10 +203,14 @@
 	</jsp-config>
 
 	<!-- Security Constraint -->
+	<deny-uncovered-http-methods />
+	
 	<security-constraint>
 		<web-resource-collection>
 			<web-resource-name>Secure content</web-resource-name>
 			<url-pattern>/*</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>LEARNER</role-name>
@@ -221,6 +225,8 @@
 			<web-resource-name>Authoring content</web-resource-name>
 			<url-pattern>/authoring/*</url-pattern>
 			<url-pattern>/pages/authoring/*</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>AUTHOR</role-name>
@@ -234,6 +240,8 @@
 			<url-pattern>/monitoring/*</url-pattern>
 			<url-pattern>/pages/monitoring/*</url-pattern>
 			<url-pattern>/definelater.do</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>MONITOR</role-name>