RESTful Java Web Services - Third Edition

Using the javax.annotation.security annotations to control access

The javax.annotation.security annotations available with Java EE simplify the coding effort for adding authentication and authorization checks for an application. The Jersey framework allows you to use the following javax.annotation.security annotations, on the JAX-RS resource class or methods, to control the access, based on the user role:

• javax.annotation.security.DenyAl: With this, no roles can invoke the annotated resource class or method
• javax.annotation.security.PermitAll: With this, all the security roles are allowed to invoke the annotated resource method(s)
• javax.annotation.security.RolesAllowed: This specifies the list of roles permitted to access the method(s) in ...