public class WebAPIAuthentication {

    @RolesAllowed(value = { "admin" })
    class AuthenticatedWebAPI {   

    /* AuthenticatedWebAPI methods do not trigger "Missing Authentication Annotation (Java)"
     * warnings - even if not individually annotated - because the class itself is annotated.
     */ 
  
        @GET
        public String Get() {...}
        
        @PUT
        public String Put() {...}
        
        @POST
        public String Post() {...}
        
        @HEAD
        public String Head() {...}
        
        @DELETE
        public String Delete() {...}

        public String foo() {...}

        public String foo2() {...}

        public String foo3() {...}
    }

    @PermitAll
    @GET
    public String authenticatedGet() {...}

    @PermitAll
    @PUT
    public String authenticatedPut() {...}

    @DenyAll
    @DELETE
    public String authenticatedDelete() {...}

    @RolesAllowed(value = { "admin" })
    @HEAD
    public String authenticatedHead() {...}

    @PermitAll
    @POST
    public String authenticatedPost() {...}

    @GET
    public String unauthenticatedGet() {...} /* "Missing Authentication Annotation (Java)" 
                                              * warning issued here: more than 80% of methods with 
                                              * Web API annotations also have authentication  
                                              * annotations, but this method does not.
                                              */
    public String foo() {...}

    @PermitAll
    public String foo2() {...}

    public String foo3() {...}
}