code: @Override
      protected MatchResponse getMatchResponse(SecurityConstraint securityConstraint, String resourceName, String method) {
          CollectionMatch collectionMatch = getCollectionMatch(securityConstraint.getWebResourceCollections(), resourceName, method);
  
          if (CollectionMatch.RESPONSE_NO_MATCH.equals(collectionMatch)) {
              return MatchResponse.NO_MATCH_RESPONSE;
          }
  
          if (com.ibm.ws.webcontainer.osgi.WebContainer.getServletContainerSpecLevel() >= 31) {
              if (collectionMatch.isExactMatch() && securityConstraint.isAccessUncovered() && securityConstraint.isFromHttpConstraint()) {
                  return new MatchResponse(securityConstraint.getRoles(), securityConstraint.isSSLRequired(),
                                  securityConstraint.isAccessPrecluded(), CollectionMatch.RESPONSE_PERMIT);
              }
          }
  
          return new MatchResponse(securityConstraint.getRoles(), securityConstraint.isSSLRequired(),
                          securityConstraint.isAccessPrecluded(), collectionMatch);
      }
docs: Gets the response object that contains the roles, the SSL required
  and access precluded indicators. Gets the response using the standard method algorithm.
  
  @param resourceName The resource name.
  @param method The HTTP method.
  @return