When method permissions are specified, basic user name/password authentication will be invoked by the GlassFish Server.
To use a different type of authentication or to require a secure connection using SSL, specify this information in an application deployment descriptor.