16.5.2. Secure a JAX-RS Web Service using Annotations

Procedure 16.4. Secure a JAX-RS Web Service using Supported Security Annotations

1. Enable role-based security. For more information, refer to: Section 16.5.1, “Enable Role-Based Security for a RESTEasy JAX-RS Web Service”
2. Add security annotations to the JAX-RS web service. RESTEasy supports the following annotations:

   @RolesAllowed

   Defines which roles can access the method. All roles should be defined in the web.xml file.

   @PermitAll

   Allows all roles defined in the web.xml file to access the method.

   @DenyAll

   Denies all access to the method.