Fixes #21896: Default group to role mapping. (#21900)

* enable no role mapping test
* remove all glassfish-web.xml

Author: SAMEER PANDIT

appserver/tests/appserv-tests/devtests/security/soteria/app-custom/src/main/webapp/WEB-INF/glassfish-web.xml

@@ -65,7 +65,8 @@
 @EmbeddedIdentityStoreDefinition({ 
     @Credentials(callerName = "reza", password = "secret1", groups = { "foo", "bar" }),
     @Credentials(callerName = "alex", password = "secret2", groups = { "foo", "kaz" }),
-    @Credentials(callerName = "arjan", password = "secret3", groups = { "foo" }) }
+    @Credentials(callerName = "arjan", password = "secret3", groups = { "foo" }) ,
+    @Credentials(callerName = "sameer", password = "pandit", groups = { "bar" })}
 )
 
 @WebServlet("/servlet")

appserver/tests/appserv-tests/devtests/security/soteria/app-double-ham/src/main/webapp/WEB-INF/glassfish-web.xml

@@ -144,4 +144,20 @@ public void testNotAuthenticatedWrongPassword() {
             response.getContentAsString());
     }
 
+    @Test
+    public void testNotAuthenticatedNotAllowedRole() {
+
+        DefaultCredentialsProvider credentialsProvider = new DefaultCredentialsProvider();
+        credentialsProvider.addCredentials("sameer", "pandit");
+
+        getWebClient().setCredentialsProvider(credentialsProvider);
+
+        WebResponse response = responseFromServer("/servlet");
+
+        assertEquals(403, response.getStatusCode());
+
+        assertDefaultNotAuthenticated(
+                response.getContentAsString());
+    }
+
 }