# Working in the Security page

In the Security page of the Web deployment descriptor editor, you can add or remove the names of each defined security role.

To work in the Security page, complete the following steps:

1. Open a Web project in the Project Explorer.
2. Double-click the Web project's Deployment Descriptor file in the Project Explorer. The Web deployment descriptor editor opens.
3. Click the Security tab to open the Security page.
4. The Security page has the following two sections:
   - Security Roles - lists and lets you add or remove the security roles defined for this Web application as well as provide a description of each role.
   - Security Constraints - lets you add or remove security constraints for specific security roles as well as add descriptions of each security constraint. In addition, you can add or remove Web resources and their HTTP methods, define the security roles who are authorized to access the Web resources, and specify user data constraints on user data: (None, Integral, or Confidential.) None means that the application requires no transport guarantees. Integral means data cannot be changed in transit between client and server. Confidential means data content cannot be observed while it is in transit. These data contraints usually require the use of SSL.

Related concepts
The Web deployment descriptor editor

Related tasks
Defining security roles for enterprise applications
Configuring Web applications using the Web deployment descriptor editor

(C) Copyright IBM Corporation 2000, 2005. All Rights Reserved.