// run-as
RunAsIdentityDescriptor runAs = descriptor.getRunAsIdentity();
if (runAs!=null) {
RunAsNode runAsNode = new RunAsNode();
runAsNode.writeDescriptor(myNode, WebTagNames.RUNAS_SPECIFIED_IDENTITY, runAs);
}
// sercurity-role-ref*
Enumeration roleRefs = descriptor.getSecurityRoleReferences();
SecurityRoleRefNode roleRefNode = new SecurityRoleRefNode();