it looks like at the time you deployed your app, there was no principal-2-role mapping in effect for role IJWAPPS. You can probably confirm this by looking for a warning message in server.log. I don't think that fully explains what you are seeing. but it explains, for example, why you had a problem if get was include in the list of constrained methods.
so as a first step make sure you define a principal-2-role mapping for role IJWAPPS, and map your users to it, preferabbly by mapping a sgroup of which your users are a member, to the role. You must redeploy your app after doing this, You should see a change in the policy file. attach the new granted.policy file to this thread, and the new error msgs that occur when you try to access your endpoint.
Ron
[Message sent by forum member 'monzillo' (monzillo)]
http://forums.java.net/jive/thread.jspa?messageID=274169