WEB-INF/web.xml:


  <!-- Security settings -->
  <security-constraint>
    <web-resource-collection>
      <web-resource-name>
        Solr authenticated application
      </web-resource-name>
      <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>solrrestricted</role-name>
    </auth-constraint>
  </security-constraint>
   <login-config>
    <auth-method>BASIC</auth-method>
    <realm-name>SOLR login</realm-name>
  </login-config>
  <security-role>
    <description>SOLR user</description>
    <role-name>solrrestricted</role-name>
  </security-role>




conf/tomcat-users.xml:

  <role rolename="solrrestricted"/>
  <role username="solrrestricteduser" password="justforme" roles="solrrestricted"/>