if ( user != null )
{
WebConsoleSecurityProvider provider = ( WebConsoleSecurityProvider ) tracker.getService();
if ( provider != null )
{
return provider.authorize( user, role );
}
// no provider, grant access (backwards compatibility)
return true;
}