docs: @Override
      public WebReply checkPrecludedAccess(WebRequest webRequest, String uriName) {
          WebReply webReply = null;
          if (webRequest.isAccessPrecluded()) {
              webReply = new DenyReply("Access is precluded because security constraints are specified, but the required roles are empty.");
          } else if (MatchResponse.DENY_MATCH_RESPONSE.equals(webRequest.getMatchResponse())) {
              webReply = new DenyReply("Http uncovered method found, denying reply.");
          } else {
              HttpServletRequest req = webRequest.getHttpServletRequest();
              List<String> requiredRoles = webRequest.getRequiredRoles();
  
              String defaultMethod = (String) req.getAttribute("com.ibm.ws.webcontainer.security.checkdefaultmethod");
              if ("TRACE".equals(defaultMethod) && requiredRoles.isEmpty()) {
                  webReply = new DenyReply("Illegal request. Default implementation of TRACE not allowed.");
              }
          }
          return webReply;
      }