I’m actually trying to resolve this problem.

Java EE security model provides interfaces to query if the current logged user has a given role (either declaratively through @RolesAllowed or @RolesDenied, or programatically like EJBContext.isCallerInRole).