samples/quickstart/WEB-INF/web.xml

<?xml version="1.0" encoding="UTF-8"?>

<web-app version="2.4"
         xmlns="http://java.sun.com/xml/ns/j2ee"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">

    <filter>
        <filter-name>JSecurityFilter</filter-name>
        <filter-class>org.jsecurity.web.servlet.JSecurityFilter</filter-class>
        <init-param><param-name>config</param-name><param-value>

            # The JSecurityFilter configuration is very powerful and flexible, while still remaining succinct.
            # Please read the comprehensive example, with full comments and explaination, in the JavaDoc:
            #
            # http://www.jsecurity.org/api/org/jsecurity/web/servlet/JSecurityFilter.html
            
            [main]
            sessionMode = jsecurity
            [interceptors]

            [urls]
            /account/** = authcBasic
            /remoting/** = authcBasic, roles[b2bClient], perms[remote:invoke:"lan,wan"]

        </param-value></init-param>
    </filter>


    <filter-mapping>
        <filter-name>JSecurityFilter</filter-name>
        <url-pattern>/*</url-pattern>
    </filter-mapping>

    <!-- ===================================================================
	 -  Welcome file list
	 -  =================================================================== -->
    <welcome-file-list>
        <welcome-file>index.jsp</welcome-file>
    </welcome-file-list>

</web-app>