code: private boolean isAuthorized() {
          SecurityService securityService = securityServiceRef.getService();
          AuthorizationService authzService = securityService.getAuthorizationService();
          boolean isAuthorized = authzService.isAuthorized(ManagementSecurityConstants.ADMIN_RESOURCE_NAME,
                                                           requiredRoles, null);
          return isAuthorized;
      }
docs: Check that the caller (on the thread) is authorized.
  <p>
  This logic is handled by the core security services.
  
  @return {@code true} if the caller is authorized, {@code false} otherwise.