diff -r ea342cf8c15a -r 67d332d48562 java/nekurak.net-web/web/WEB-INF/web.xml
--- a/java/nekurak.net-web/web/WEB-INF/web.xml	Thu Feb 25 02:41:57 2010 +0100
+++ b/java/nekurak.net-web/web/WEB-INF/web.xml	Thu Feb 25 08:26:46 2010 +0100
@@ -1,24 +1,44 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd">
     <session-config>
-	<session-timeout>30</session-timeout>
+        <session-timeout>
+	    30
+	</session-timeout>
     </session-config>
     <welcome-file-list>
-	<welcome-file>index.jsp</welcome-file>
+        <welcome-file>index.jsp</welcome-file>
     </welcome-file-list>
     <error-page>
-	<!-- Stránka nenalezena -->
-	<error-code>404</error-code>
-	<location>/WEB-INF/chyby/404.jsp</location>
+        <!-- Stránka nenalezena -->
+        <error-code>404</error-code>
+        <location>/WEB-INF/chyby/404.jsp</location>
     </error-page>
     <error-page>
-	<!-- Interní chyba serveru -->
-	<error-code>500</error-code>
-	<location>/WEB-INF/chyby/500.jsp</location>
+        <!-- Interní chyba serveru -->
+        <error-code>500</error-code>
+        <location>/WEB-INF/chyby/500.jsp</location>
     </error-page>
     <context-param>
-	<!-- Pro případ, že chybí hlavička „Accept-language“ v HTTP požadavku -->
-	<param-name>javax.servlet.jsp.jstl.fmt.fallbackLocale</param-name>
-	<param-value>cs</param-value>
+        <!-- Pro případ, že chybí hlavička „Accept-language“ v HTTP požadavku -->
+        <param-name>javax.servlet.jsp.jstl.fmt.fallbackLocale</param-name>
+        <param-value>cs</param-value>
     </context-param>
+    <!--  <zabezpečení> -->
+    <security-role>
+        <role-name>opravneny</role-name>
+    </security-role>
+    <security-constraint>
+        <web-resource-collection>
+            <web-resource-name>Správa Nekuřák.net</web-resource-name>
+            <url-pattern>/sprava/*</url-pattern>
+        </web-resource-collection>
+        <auth-constraint>
+            <role-name>opravneny</role-name>
+        </auth-constraint>
+    </security-constraint>    
+    <login-config>
+        <auth-method>BASIC</auth-method>
+        <realm-name>nekurakNET</realm-name>
+    </login-config>
+    <!--  </zabezpečení> -->
 </web-app>