Defining fewer Java EE roles will help simplify the task of managing security and make life easier. For out-of-the-box Java EE applications acquired from a third party, a number of predefined user ...