Glassfish - Role Based Access Control (Part 1)