A. the URL pattern that requires authorization
B. the HTTP methods that require authorization
C. the users allowed access to the web resource
D. the J2EE roles allowed access to the web resource
E. the authentication mechanism required by the web resource