The web service is implemented as EJB and authorization is enabled at EJB method level, and Caller
configuration is enabled for Web Service Security. Which identity is used for authorization check?

A.
Transport level identity is always used

B.
Message level identity is always used

C.
Both transport level and message identities

D.
Either transport level identity or message level identity