code: @Override
      protected String[] getRoles(Principal inPrincipal, ServletRequest inRequest) {
          UserEntity user = this.userDao.getByPrincipal(inPrincipal);
          if (user != null) {
              return user.getRoleNames();
          } else {
              return null;
          }
  
      }
docs: The getRoles method will now return
  Null if UserObject not found,
  EMPTY_ARRAY if the user found and don't have any associated roles and
  String Array if the user found and have associated roles.
  @param inPrincipal the user principal.
  @param inRequest the HTTP request.
  @return Array of Roles, empth array if no roles associated and Null if User not found
  @author  Dileep Gunda
  @since   06-11-18