public boolean isAuthorized ( HttpServletRequest req ) { if ( all ) return true ; if ( roles != null ) { for ( String srole : roles ) { if ( req . isUserInRole ( srole ) ) return true ; } } return false ; }
Check for Authorization when set .