code: private void processSecurityRoles(WebAnnotations webAnnotations, Set<String> classesWithSecurityRoles,
                                        Class<? extends Annotation> securityAnnotation, boolean annotationForClass) throws UnableToAdaptException {
          for (String classWithSecurityRole : classesWithSecurityRoles) {
              ClassInfo classInfo = webAnnotations.getClassInfo(classWithSecurityRole);
              final String fullyQualifiedClassName = classWithSecurityRole;
  
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
                  Tr.debug(tc, "@" + securityAnnotation.getSimpleName() + " found on class ", fullyQualifiedClassName);
              }
              AnnotationInfo rolesAnnotation = null;
              if (annotationForClass) {
                  rolesAnnotation = classInfo.getAnnotation(securityAnnotation);
                  getRoleValues(rolesAnnotation);
              } else {
                  for (MethodInfo methodInfo : classInfo.getDeclaredMethods()) {
                      rolesAnnotation = methodInfo.getAnnotation(securityAnnotation);
                      getRoleValues(rolesAnnotation);
                  }
              }
          }
          if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
              Tr.debug(tc, "allRoles: " + allRoles);
          }
      }
docs: Create a list of roles that represent the security annotation
  
  @param webAnnotations the main link for web module annotation related services
  @param securityRoles a list of classes containing the security annotation
  @param securityAnnotation the security annotation such as @DeclareRoles or @RolesAllowed