Enthuware

@ServletSecurity(value=@HttpConstraint(rolesAllowed = "employee"), httpMethodConstraints = {
@HttpMethodConstraint(value = "PUT", rolesAllowed = "manager")
})

Discussion
In other words, it is permissible to omit the curly braces when a single-element array is to be associated with an array-valued annotation type element.