Which two pieces of information are needed when declaring the web resource collection in the deployment descriptor？（）

A、 the URL pattern that requires authorization

B、 the HTTP methods that require authorization

C、 the users allowed access to the web resource

D、 the J2EE roles allowed access to the web resource

E、 the authentication mechanism required by the web resource