About Question enthuware.oce-ejbd.v6.2.573 :

[fjwalraven]

I think that the following answer is a correct answer to this question.
Bean provider declares the logical security roles used in the application.

The logical security roles are defined by the Bean Provider and Application Assembler by the use of @RolesAllowed, @DeclareRoles and <security-role> elements of the deployment descriptor.

See also 17.3.1 Security Roles:

Because the Bean Provider and Application Assembler do not, in general, know the security environment of the operational environment, the security roles are meant to be logical roles (or actors), each representing a type of user that should have the same access rights to the application.

Regards,
Frits

[admin]

You are right. This has now been marked as correct.

thank you for your feedback!