For configuration see The Advanced section of the Wiki for the Servlet Container Auth package.

All roles allowed

All roles allowed. Authorization set a Package Level

tomcat and admin only