...
There is a convenience abstract class for those implementing policy enforcement points that need to be aware of access roles. If you subclass this AbstractRolesBasedPEP AbstractRolesPEP class, then your implementation can be reduced to a single method.