// XXX - realm = context.getRealmConnector();
// Check each role included in this constraint
Enumeration roles = auth.getSecurityRoles();
while (roles.hasMoreElements()) {
SecurityRole role = (SecurityRole) roles.nextElement();
if (realm.hasRole(principal, role.getName()))
return;
}
; // XXX - Send "forbidden" error and
; // throw InterceptorException