问题：

[多选]

Given the security constraint in a DD：
101.<security-constraint>
102.<web-resource-collection>
103.<web-resource-name>Foo</web-resource-name>
104.<url-pattern>/Bar/Baz/*</url-pattern>
105.<http-method>POST</http-method>
106.</web-resource-collection>
107.<auth-constraint>
108.<role-name>DEVELOPER</role-name>
109.</auth-constraint>
110.</security-constraint>
And given that "MANAGER" is a valid role-name，which four are true for this security constraint？（）

A . MANAGER can do a GET on resources in the /Bar/Baz directory.
B . MANAGER can do a POST on any resource in the /Bar/Baz directory.
C . MANAGER can do a TRACE on any resource in the /Bar/Baz directory.
D . DEVELOPER can do a GET on resources in the /Bar/Baz directory.
E . DEVELOPER can do only a POST on resources in the /Bar/Baz directory.
F . DEVELOPER can do a TRACE on any resource in the /Bar/Baz directory.