ns an
         empty array, access is to be denied independent of authentication state and identity. Conversely, if its
         value is <code>PERMIT</code>, it indicates that access is to be allowed independent of authentication
         state and identity. When the array contains the names of one or more roles, it indicates that access is
         contingent on membership in at least one of the named roles (independent of the value of
         <a href="../../javax/servlet/HttpConstraintElement.html#getEm