What if another session bean implements these interfaces as well and redefine security policy?Methods of LocalInsurance as well as RemoteInsurance will be accessible only to clients in the role of salesman.
My point is correct answer should be : "Methods of LocalInsurance as well as RemoteInsurance implemented in InsuranceBean will be accessible only to clients in the role of salesman."