The first refers to all of the remote and home interface methods of an enterprise bean. The second is used for referring to a specific method of the remote or home interface of an enterprise bean. If there are multiple methods with the same overloaded name, this style refers to all of the overloaded methods. Method specifications can be further qualified with parameter names for methods with an overloaded name. Many applications feature unprotected Web-tier content, available to any caller without authentication.
Some applications also feature unprotected enterprise beans.
In either tier, unprotected resources are characterized by the absence of a requirement that their caller be authenticated. In the Web tier, unrestricted access is provided simply by leaving out an authentication rule. In the EJB tier, unrestricted access is accomplished by mapping at least one role which is permitted access to the resource to the universal set of users independent of authentication. To understand how each application, and each component within an application can apply its own authorization requirements, consider the following examples. The deployment descriptor has 2 role elements, employees and good-managers .