code: private List<String> createRoles(HttpConstraintElement httpConstraint) {
          String[] rolesFromAnno = httpConstraint.getRolesAllowed();
          List<String> roles = new ArrayList<String>();
          for (int i = 0; i < rolesFromAnno.length; i++) {
              roles.add(rolesFromAnno[i]);
          }
          return roles;
      }
docs: Gets a list of roles from the rolesAllowed element in the @HttpConstraint annotation
  
  @param httpConstraint the element representing the information in the @HttpConstraint annotation
  @return a list of allowed roles defined in the annotation's security constraint