String []roles = securityElement.getRolesAllowed();
SecurityConstraint constraint = new SecurityConstraint();
if (emptyRoleSemantic == ServletSecurity.EmptyRoleSemantic.DENY) {
constraint.addConstraint(new PermitEmptyRolesConstraint(false));
} else if (roles.length == 0
&& transportGuarantee == ServletSecurity.TransportGuarantee.NONE) {
constraint.addConstraint(new PermitEmptyRolesConstraint(true));
} else {
for (String role : roles)