A developer implements a session bean which acts as a session facade for an application. This
means that clients will only see this session bean’s interface which offers the application interface.
There are three distinct roles known at development time”user”, “admin”, and “guest”. The majority
of the methods will be used by role “user”. All methods must have role permissions active and
roles may be added or changed in the future.
Which two scenarios are correct? (Choose two.)
A.
The developer annotates the bean class with @PermitAII and annotates the methods used by
role “guest” or “admin” individually.
B.
The developer annotates the bean class with @DenyAII and annotates the methods used by
role “user”, “guest”, or “admin” individually.
C.
The developer defines individual method permissions for the methods used by roles “user”,
“guest”, and “admin” in the deployment descriptor.
D.
The developer annotates the bean class with @RolesAllowed(“user”) and annotates the
methods used by role “guest” or “admin” individually.
E.
Thedeveloper defines a method permission with method name “*” and role “user” and adds
individual method permissions for the methods used by roles “guest” and “admin” in the
deployment descriptor.