return false;
}
@Override
public AuthorizationResult decide(final Resource resource, final Subject subject, final RoleDecisionManager roleDecisionManager) {
final URLResource urlResource = checkInstanceOf("resource", resource, URLResource.class);
final List<Role> roles = resourceManager.getMandatoryRoles(urlResource);
if (roles == null || roles.isEmpty()) {
return ACCESS_ABSTAIN;
}