Using EJB 3.0 Security Annotations: http://docs.oracle.com/cd/B32110_01/web.1013/b28221/servsecr004.htm