code: @GET
      @Path("/checkIsUserInRole")
      @RolesAllowed("Tester")
      public Response checkIsUserInRole(@Context SecurityContext sec) {
          Principal user = sec.getUserPrincipal();
          Response response;
          if (!sec.isUserInRole("Echoer")) {
              response = Response.status(new Response.StatusType() {
                  @Override
                  public int getStatusCode() {
                      return Response.Status.FORBIDDEN.getStatusCode();
                  }
  
                  @Override
                  public Response.Status.Family getFamily() {
                      return Response.Status.FORBIDDEN.getFamily();
                  }
  
                  @Override
                  public String getReasonPhrase() {
                      return "SecurityContext.isUserInRole(Echoer) was false";
                  }
              }).build();
          } else {
              response = Response.ok(user.getName(), MediaType.TEXT_PLAIN).build();
          }
          return response;
      }
docs: This endpoint requires a Tester role, and also validates that the caller has the role Echoer by calling
  {@linkplain SecurityContext#isUserInRole(String)}.
  
  @return principal name or FORBIDDEN error