[security-dev] PicketLink 3 IDM - hasRole Checking