title: JSF Controller ignores @RolesAllowed annotation
body: <p>I have a JSF controller that is Named and SessionScoped like this</p>
  
  <pre><code>import javax.inject.Named;
  import javax.enterprise.context.SessionScoped;
  
  @Named
  @SessionScoped
  public class SomeController {
  ...
  </code></pre>
  
  <p>adding @RolesAllowed or @DenyAll to the controller has no effect. When this controller invokes EJBs that have the @RolesAllowed annotation, it works properly on those bean calls.</p>
  
  <p>I am using jsf 2.2 and deploying my application to Wildfy 8.1</p>