Index: lams_tool_scratchie/web/WEB-INF/web.xml
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_scratchie/web/WEB-INF/web.xml,v
diff -u -r1.2.2.8 -r1.2.2.9
--- lams_tool_scratchie/web/WEB-INF/web.xml	24 Feb 2016 12:36:22 -0000	1.2.2.8
+++ lams_tool_scratchie/web/WEB-INF/web.xml	15 Mar 2017 07:34:45 -0000	1.2.2.9
@@ -202,10 +202,14 @@
 	</jsp-config>
 
 	<!-- Security Constraint -->
+	<deny-uncovered-http-methods />
+	
 	<security-constraint>
 		<web-resource-collection>
 			<web-resource-name>Secure Content</web-resource-name>
 			<url-pattern>/*</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>LEARNER</role-name>
@@ -220,6 +224,8 @@
 			<web-resource-name>Authoring content</web-resource-name>
 			<url-pattern>/authoring/*</url-pattern>
 			<url-pattern>/pages/authoring/*</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>AUTHOR</role-name>
@@ -233,6 +239,8 @@
 			<url-pattern>/pages/monitoring/*</url-pattern>
 			<url-pattern>/monitoring.do</url-pattern>
 			<url-pattern>/definelater.do</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>MONITOR</role-name>
@@ -245,6 +253,8 @@
 			<web-resource-name>Admin content</web-resource-name>
 			<url-pattern>/admin/*</url-pattern>
 			<url-pattern>/pages/admin/*</url-pattern>
+			<http-method>GET</http-method>
+ 			<http-method>POST</http-method>
 		</web-resource-collection>
 		<auth-constraint>
 			<role-name>SYSADMIN</role-name>