code: private static String requestActions(HttpServletRequest request)
     {
        String actions = request.getMethod() + (request.isSecure() ? ":CONFIDENTIAL" : "");
        return actions;
     }
docs: Build the request permission actions from the HTTP method component using HttpServletRequest.getMethod() + the
  TransportType component of the action from HttpServletRequest.isSecure().
  
  @param request
  - the servlet request
  @return the permission actions string