Sun Java System Web Server 7.0 Update 6 Developer's Guide to Java Web Applications
sun-web.xml
You define roles in the deployment descriptor file web.xml and
the corresponding role mappings in the sun-web.xml deployment
descriptor file for individually deployed web modules.