public AzResult getAuthorizationDecision(AzSubject subject,
AzResource resource, AzAction action, AzEnvironment environment) {
//TODO: get user roles from Rolemapper, and do the policy evaluation
//return ok for now
AzResult rtn = new AzResultImpl(Decision.PERMIT, Status.OK, new AzObligationsImpl());
return rtn;
}