I have to move an application with basic authentication from Tomcat where it is working fine to WS Express 5. While deploying the war file from admin console i mapped the "TestROle" defined in web.xml to machines Adminsitrator Group and Users. But the basic authenticaiton is not active and every resources is accessible without login. binding and application.xml files contains the sercurity constraints tags properly but security is not working.
What am i missing to make basic authentication work?