About Question enthuware.jwpv6.2.666 :

[tori3852]

Second choice

Code: Select all

@ServletSecurity(@HttpConstraint(EmptyRoleSemantic.DENY), rolesAllowed = "R1") 

is syntactycally incorrect, and not because of EmptyRoleSemantic.DENY cannot be used when rolesAllowed is not empty as stated now in explanation. I can only assume it meant to be

Code: Select all

@ServletSecurity(@HttpConstraint(value = EmptyRoleSemantic.DENY, rolesAllowed = "R1")) 

(note, that rolesAllowed attribute belongs to HttpConstraint, not to ServletSecurity), then the explanation fits.

[admin]

You are right. This has now been updated.

thank you for your feedback!

[tori3852]

It is still incorrect, because:

It is permissible to omit the element name and equals sign (=) in a single-element annotation whose element name is value, as shown below:

(from http://docs.oracle.com/javase/1.5.0/doc ... tions.html).

So in this case you must use

Code: Select all

value = 

element:

Code: Select all

@ServletSecurity(@HttpConstraint(value = EmptyRoleSemantic.DENY, rolesAllowed = "R1")) 

.

[admin]

Fixed.

thank you for your feedback!