<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5">
  <display-name>MAIN_NW731ESP_D~tc~tm~wl~ui~sap.com</display-name>
  <welcome-file-list>
    <welcome-file>inbox.html</welcome-file>
  </welcome-file-list>
  <servlet>
    <description></description>
    <display-name>WorklistController</display-name>
    <servlet-name>WorklistController</servlet-name>
    <servlet-class>com.sap.wl.WorklistController</servlet-class>
  </servlet>
  <servlet-mapping>
    <servlet-name>WorklistController</servlet-name>
    <url-pattern>/WorklistController</url-pattern>
  </servlet-mapping>
  <servlet-mapping>
    <servlet-name>WorklistController</servlet-name>
    <url-pattern>/inbox.html</url-pattern>
  </servlet-mapping>
  <servlet>
    <description></description>
    <display-name>AuthenticationServlet</display-name>
    <servlet-name>AuthenticationServlet</servlet-name>
    <servlet-class>com.sap.wl.AuthenticationServlet</servlet-class>
  </servlet>
  <servlet-mapping>
    <servlet-name>AuthenticationServlet</servlet-name>
    <url-pattern>/auth</url-pattern>
  </servlet-mapping>
  <error-page>
    <error-code>403</error-code>
    <location>/403.html</location>
  </error-page>
  <security-constraint>
    <display-name>Allowed</display-name>
    <web-resource-collection>
      <web-resource-name>Allowed Resource</web-resource-name>
      <url-pattern>/403.html</url-pattern>
      <url-pattern>/auth</url-pattern>
      <url-pattern>/wl/icons/*</url-pattern>
      <url-pattern>/wl/res/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>EveryUser</role-name>
    </auth-constraint>
  </security-constraint>
  <security-constraint>
    <display-name>Restricted</display-name>
    <web-resource-collection>
      <web-resource-name>Restricted Resource</web-resource-name>
      <url-pattern>*</url-pattern>           
    </web-resource-collection>
    <auth-constraint>
      <role-name>UnifiedInboxUser</role-name>
    </auth-constraint>
  </security-constraint>
  <login-config>
    <auth-method>FORM</auth-method>
  </login-config>
  <security-role>
    <role-name>UnifiedInboxUser</role-name>
  </security-role> 
  <security-role>
    <role-name>EveryUser</role-name>
  </security-role> 
</web-app>