code:         protected void doPost(HttpServletRequest req, HttpServletResponse resp)
                  throws ServletException, IOException {
              doGet(req, resp);
          }
      }
      
      @ServletSecurity(@HttpConstraint(EmptyRoleSemantic.DENY))
      public static class DenyAllServlet extends TestServlet {
          private static final long serialVersionUID = 1L;
      }
      
      public static class SubclassDenyAllServlet extends DenyAllServlet {
          private static final long serialVersionUID = 1L;
      }
      
      @ServletSecurity(@HttpConstraint(EmptyRoleSemantic.PERMIT))
      public static class SubclassAllowAllServlet extends DenyAllServlet {
          private static final long serialVersionUID = 1L;
      }
  
      @ServletSecurity(value= @HttpConstraint(EmptyRoleSemantic.PERMIT),
          httpMethodConstraints = {
              @HttpMethodConstraint(value="GET",
                      emptyRoleSemantic = EmptyRoleSemantic.DENY)
          }
      )
      public static class MethodConstraintServlet extends TestServlet {
          private static final long serialVersionUID = 1L;
      }
      
      @ServletSecurity(@HttpConstraint(rolesAllowed = "testRole"))
      public static class RoleAllowServlet extends TestServlet {
          private static final long serialVersionUID = 1L;
      }
  
      @ServletSecurity(@HttpConstraint(rolesAllowed = "otherRole"))
      public static class RoleDenyServlet extends TestServlet {
          private static final long serialVersionUID = 1L;
      }
  }
  