code: private List<SecurityConstraint> createSecurityConstraints(SecurityMetadata securityMetadataFromDD, ServletSecurityElement servletSecurity, Collection<String> urlPatterns) {
          List<SecurityConstraint> securityConstraints = new ArrayList<SecurityConstraint>();
          securityConstraints.add(getConstraintFromHttpElement(securityMetadataFromDD, urlPatterns, servletSecurity));
          securityConstraints.addAll(getConstraintsFromHttpMethodElement(securityMetadataFromDD, urlPatterns, servletSecurity));
          return securityConstraints;
      }
docs: Constructs a list of SecurityConstraint objects from the given ServletSecurityElement and list of URL patterns.
  
  @param securityMetadataFromDD the security metadata processed from the deployment descriptor, for updating the roles
  @param servletSecurity the ServletSecurityElement that represents the information parsed from the @ServletSecurity annotation
  @param urlPatterns the list of URL patterns defined in the @WebServlet annotation
  @return a list of SecurityConstraint objects