title: How do I provide basic http authentication for static tomcat webapps without changing tomcat-users.xml?
body: <p>I have access to the tomcat manager and can upload war-files. One of these wars is a static web project (zipped html + media files, renamed to *.war). I want add a Web-INF/web.xml file to this war to protect the content with basic http auth.</p>
  
  <p>I know how to do this by adding global users and assigning roles in the <code>tomcat-users.xml</code>, but I want to have all usernames and passwords defined in my war-file.</p>
  
  <ol>
  <li>Can this be done without touching the tomcat's <code>tomcat-users.xml</code>?</li>
  <li>And if yes, how do I specify this in my static project's <code>web.xml</code>?</li>
  </ol>
  
  <p>Thx, Juve</p>