If the application assembler defines security roles, then it is also responsible for assigning security-role elements to the security-role-ref elements described by the bean provider. |
security-role-ref element contains (optional) description element, and the name of role that is used in isCallerInRole() calls. Assembler adds a role-link element containing the name of the security role defined in security-role element. |
Deployment tool assigns the security roles to the principals and/or group of principals (individual users or user groups). |