J2EE has attracted more and more attentions for its flexibility, maintenability and security, in J2EE, the container can perform the access right relation to the role by configer file (web.xml and ejb-jar.xml).