The Java EE 7 Tutorial
56.4 Concurrency and Security
Although Concurrency Utilities for Java EE defers most security decisions to each application server implementation, if the container supports a security context, that context can be propagated to the thread of execution. The
ContextService can support several runtime behaviors and the
security attribute, if enabled, will propagate the container security principal.