J2EE Misconfiguration: Weak Access Permissions Abstract Permission to invoke EJB methods should not be granted to the ANYONE role. ...