Enthuware

Hello,

I see a comment on clarification
@DenyAll is only allowed on a method.
As per http://docs.oracle.com/javaee/6/api/jav ... nyAll.html DenyAll is allowed in both class and method. Please clarify.

Thanks,
Mahendran Mookkiah.

Hi Mahendran Mookkiah,

You are right, that is not correct! I will update the question.

Thank you for your feedback!

Regards,
Frits

Hi,

Doesn't @RolesAllowed("student") on the addp() overrules the @DenyAll on the class?

Reference:
http://docs.oracle.com/cd/E16439_01/doc ... ecr004.htm

Please clarify.

Thanks,
Mahendran.

Yes indeed, making it a correct option.

Regards,
Frits