title: Access to servlet protected by security-constraint from server-side code
body: <p>I am running a java application on google app engine. I protected my admin servlets with a security constraint:</p>
  
  <pre><code>&lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;tasks&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;/admin/*&lt;/url-pattern&gt;
      &lt;/web-resource-collection&gt;
      &lt;auth-constraint&gt;
          &lt;role-name&gt;admin&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
  &lt;/security-constraint&gt;
  </code></pre>
  
  <p>Now I want to call one of these servlet from server side code. This seems to be not possible because of this security constraint. Is there a role preventing regular users from accessing this resources but prevents access to calls from server side code? Or is there another approach to my problem?</p>