Disable the HTTP TRACE,DELETE methods in Web Sphere

[dhaval vyas]

I want to Disable the HTTP TRACE method in web Sphere application server 6.1, but not getting how to do so.

All the results from search engine points to configuration which is possible on IBM HTTP Server but can not be done on WAS 6.1 it would great if anyone knowing the solution can help urgently

Disabling http transport tracing only disables the logs in trace file which is different, we are looking to disable http trace method as described in following reference link

http://publib.boulder.ibm.com/httpserv/ihsdiag/http_trace.html

I tried adding following in web.xml file. it works in Tomcat, but not in websphere.

<security-constraint> <web-resource-collection> <web-resource-name>Forbidden</web-resource-name> <url-pattern>/*</url-pattern> <http-method>PUT</http-method> <http-method>DELETE</http-method> <http-method>TRACE</http-method> <http-method>OPTIONS</http-method> </web-resource-collection> <auth-constraint> <role-name>empty_role</role-name> </auth-constraint> </security-constraint>