/a>. If its value is <tt>DENY</tt>, and <code>getRolesAllowed</code> returns an empty
 array, access is to be denied independent of authentication state and identity. Conversely, if its value is
 <code>PERMIT</code>, it indicates that access is to be allowed independent of authentication state and identity. When
 the array contains the names of one or more roles, it indicates that access is contingent on membership in at least
 one of the named roles (independent of the value of <a href="../../jakarta/servl