This topic has not yet been written. The content below is from the topic description.
8.2.6. Securing entities You can restrict which links are injected in the resource based on security restrictions for the client, so that if the current client doesn't have permission to delete a resource he will not be presented with the "delete" link relation. Security restrictions can either be specified on the @LinkResource annotation, or using RESTEasy and EJB's security annotation @RolesAllowed on the JAX-RS method. Table 8.4. @LinkResource security restrictions Parameter Type Function Default constraint String A UEL expression which must evaluate to true to inject this method's link in the response entity. Defaults to using @RolesAllowed from the JAX-RS method.