The constraint element has no intermediary predecessor.

This is achieved through the security-constraint element in the Web deployment descriptor.

For other web applications, use a security-constraint element in the deployment descriptor.