Access Annotation over: Pages and UI elements @Page(role = DefaultPage.class, path = "/home") @RestrictedAccess(roles = {"gwtcon-admin", "gwtcon-user"}) public class Home extends HTML { @RestrictedAccess(roles = {"gwtcon-admin"}) @Inject @DataField private Button sendLogo; ... } REST resources @GET @Path("/{id}") @Produces(MediaType.APPLICATION_JSON) @RestrictedAccess(roles = "gwtcon-admin") public Customer find(@PathParam("id") long id);