Alice knows that most of the time declarative security is the way to go. It’s flexible, powerful, portable, and robust. As web application architectures have evolved, individual servlets have become more and more specialized. In the old days, a single servlet would be used to provide business logic to support employees and managers. Today, these functions would probably be split into at least two distinct servlets.

But, lucky Alice has just inherited someone else’s “RecipeServlet”. Alice has heard a rumour that RecipeServlet uses programmatic security, so she starts looking through the source code and finds this snippet...