Update security constraints for REST endpoints

ace-am/src/main/webapp/WEB-INF/web.xml

@@ -731,21 +731,59 @@
             <role-name>Modify System Settings</role-name>
         </auth-constraint>
     </security-constraint>
+
     <security-constraint>
         <display-name>Rest</display-name>
         <web-resource-collection>
-            <web-resource-name>CollectionManagement</web-resource-name>
+            <web-resource-name>Rest Modify</web-resource-name>
             <description/>
-            <url-pattern>/rest/collection/*</url-pattern>
-            <http-method>GET</http-method>
+            <url-pattern>/rest/collection</url-pattern>
+            <url-pattern>/rest/collection/modify/*</url-pattern>
+            <url-pattern>/rest/tokenstore/*</url-pattern>
+            <url-pattern>/rest/settings/*</url-pattern>
             <http-method>POST</http-method>
         </web-resource-collection>
         <auth-constraint>
             <description/>
             <role-name>Collection Modify</role-name>
+        </auth-constraint>
+    </security-constraint>
+
+    <security-constraint>
+        <web-resource-collection>
+            <web-resource-name>Rest Browse</web-resource-name>
+            <url-pattern>/rest/collection/settings/*</url-pattern>
+            <url-pattern>/rest/settings/*</url-pattern>
+            <http-method>GET</http-method>
+        </web-resource-collection>
+        <auth-constraint>
             <role-name>Browse</role-name>
         </auth-constraint>
     </security-constraint>
+
+    <security-constraint>
+        <web-resource-collection>
+            <web-resource-name>Rest Audit</web-resource-name>
+            <url-pattern>/rest/collection/audit/*</url-pattern>
+            <http-method>POST</http-method>
+        </web-resource-collection>
+        <auth-constraint>
+            <role-name>Audit</role-name>
+        </auth-constraint>
+    </security-constraint>
+
+    <security-constraint>
+        <web-resource-collection>
+            <web-resource-name>Rest Status</web-resource-name>
+            <url-pattern>/rest/groups</url-pattern>
+            <url-pattern>/rest/collections/by-group/*</url-pattern>
+            <http-method>GET</http-method>
+        </web-resource-collection>
+        <auth-constraint>
+            <role-name>Status</role-name>
+        </auth-constraint>
+    </security-constraint>
+
     <login-config>
         <auth-method>BASIC</auth-method>
         <realm-name>Audit Manager</realm-name>