//
boolean ok = false;
if (denyAll != null) {
ok = false;
} else if (rolesAllowed != null) {
SecurityContext securityContext = request.getSecurityContext();
for (String role : rolesAllowed.value()) {
if (securityContext.isUserInRole(role)) {
ok = true;
break;
}
}
} else {