WAS 6.20 Authorization

Hi,

I've just installed WAS 6.20 (Java). I'm having trouble applying security to applications running on my server.

For example, the standard app "/htmlb" does not require any authorization for access. If I wanted to apply some security to this application (without redeploying) how do I go about this? I have experimented with JAAS and the inqmyloginsystem stack and setting roles, but can't seem to get the server to authenticate users. I can't really find any thorough documentation on the subject. Can anyone point me to some documentation or assist please ? 😊