An organization has business logic implemented in EJB components. Current clients use

17

container-managed, role-based security to access the business logic using RMI. Management has determined that the business logic must be made available to non-RMI clients using a Web service.

Which container-managed Web service security mechanism must the development team use to allow Web service clients to use the current security model?