Constrained means something which has some sort of security associated with it. In terms of
J2ee anything that is constrained cant be accessed directly, it can be accessed only after the Container authenticates the requester of the resource. This is usually done by the requester providing the username and a password which is checked by the Container.