Complete role-based access XML file

web.xml

<servlet>
    <servlet-name>Servlet_1</servlet-name>
    <servlet-class>com.Servlet_1</servlet-class>
</servlet>
<servlet>
    <servlet-name>Servlet_2</servlet-name>
    <servlet-class>com.Servlet_2</servlet-class>
</servlet>
  
<servlet>
    <servlet-name>Servlet_3</servlet-name>
    <servlet-class>com.Servlet_3</servlet-class>
</servlet>
<servlet-mapping>
    <servlet-name>Servlet_1</servlet-name>
    <url-pattern>/Servlet1</url-pattern>
</servlet-mapping>
<servlet-mapping>
    <servlet-name>Servlet_2</servlet-name>
    <url-pattern>/Servlet2</url-pattern>
</servlet-mapping>
<servlet-mapping>
    <servlet-name>Servlet_3</servlet-name>
    <url-pattern>/Servlet3</url-pattern>
</servlet-mapping>

<security-constraint>
    <web-resource-collection>
      <web-resource-name>Dashboard</web-resource-name>
      <url-pattern>/Servlet1</url-pattern>
      <http-method>POST</http-method>
      <http-method>GET</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>employee</role-name>
      <role-name>CEO</role-name>
      <role-name>CFO</role-name>
      
    </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>
<security-constraint>
    <web-resource-collection>
      <web-resource-name>onlyCEO</web-resource-name>
      <url-pattern>/Servlet2</url-pattern>
      <http-method>POST</http-method>
      <http-method>GET</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>CEO</role-name>
          </auth-constraint>
    <user-data-constraint>
      <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>