@Test
public void ignoresSecurityAnnotationFromClassWhenMethodHasOwn() {

    ResourceDescriptor resource = new AbstractResourceDescriptor(ResourceWithSecurityAnnotationOnClassAndMethod.class);
    List<ResourceMethodDescriptor> resourceMethods = resource.getResourceMethods().get("GET");
    assertEquals(1, resourceMethods.get(0).getAnnotations().length);
    PermitAll permitAll = (PermitAll)resourceMethods.get(0).getAnnotations()[0];
    assertNotNull(permitAll);
}