The method-permission element specifies that one or more security roles are allowed to invoke one or more enterprise bean methods.