...
There is a convenience abstract class for those implementing policy enforcement points that need to be aware of access roles. If you subclass this AbstractRolesAuthorizationDelegate class, then your implementation can be reduced to a single method.