The WWW_CANDIDATE role is a business role which grants access to the Candidate Self Service module, it does not grant execution rights. The WWW_CANDIDATE web role is tied to the CSS_SPLASH which will display all of the Candidate related self service functions the user has execution rights to.