tomcat设置页面权限访问（BASIC认证）

环境：tomcat8.5

<tomcat-users>
    <role rolename="admin"/>
    <role rolename="user"/>
    <user username="admin" password="123456" roles="admin,user"/>
    <user username="system" password="system" roles="admin"/>
    <user username="user" password="user" roles="user"/>
</tomcat-users>

    去掉#号以及后面注释

    <security-constraint>
      <web-resource-collection>
        <web-resource-name>Public resources</web-resource-name>
            <url-pattern>/*</url-pattern>      #路径
            <http-method>HEAD</http-method>   #请求方法
            <http-method>GET</http-method>
        </web-resource-collection>
      <auth-constraint>
        <role-name>admin</role-name>  #认证的角色
      </auth-constraint>
    </security-constraint>

    <login-config>
        <auth-method>BASIC</auth-method>
        <realm-name>ERROR</realm-name>
    </login-config>