posted 15 years ago
if role-name is specified , only the specfied role name can access the resource with that specified http method.
if the http-method tag is not there, all the HTTP methods are constrained.
so , all the methods can be used to access the resource by the Admin which is role specified in role-name.
Hope this helps.