code: public final void setAccess(final List<String> access) {
          final RoleAccessAssertion assertion = new RoleAccessAssertion();
          assertion.setRequiredRoles(access);
          this.accessAssertion = assertion;
      }
docs: The roles required to access this configuration/app.  If empty or not set then it is a
  <em>public</em> app.  If there are many roles then a user must have one of the roles in order to
  access the configuration/app.
  <p></p>
  The security (how authentication/authorization is done) is configured in the
  /WEB-INF/classes/mapfish-spring-security.xml
  <p>
  Any user without the required role will get an error when trying to access any of the templates and no
  templates will be listed in the capabilities requests.
  </p>
  
  @param access the roles needed to access this