So far we discussed several types of deployment descriptors for Web, EJB, and application client modules. But we know that we usually deploy an archive including all three types of modules known as an enterprise application module. This module is again a ZIP file with EAR extension.
The enterprise application module has its own deployment descriptors named
sun-application.xml for the vendor-specific deployment descriptor, which in addition to the application structure we can include declarations common between different modules inside them.
In our case, one of the common declarations are security role declarations which are defined using the
security-role element inside the