@RolesAllowed("ADMIN")
 @GET
 @Path("admin")
 public String showAdminSecret(@Auth User user) {
   return String.format(
       "Hey there, %s. It looks like you are an admin. %d", user.getName(), user.getId());
 }
 @PermitAll
 @GET
 public String showSecret(@Auth User user) {
   return String.format("Hey there, %s. You know the secret! %d", user.getName(), user.getId());
 }