Which two pieces of information are needed when declaring the web resource collection in the deployment descriptor？（）

• A、 the URL pattern that requires authorization
• B、 the HTTP methods that require authorization
• C、 the users allowed access to the web resource
• D、 the J2EE roles allowed access to the web resource
• E、 the authentication mechanism required by the web resource