security-role-mapping (sun-application.xml, sun-web.xml, sun-sip.xml, sun-ejb-jar.xml), servlet (sun-web.xml)