12.4.2. Group-Based Authorization
This method allows you to perform authorization based on the groups an user belongs to. Access is only granted if he is member of a set of groups.
To configure this method of authorization for a specific path just do:
httpBuilder .forPath("/admin/*") .authorizeWith() .group("Administrators");
Here, the
group
method expects one or more group names. When checking if an user is member of a Group, PicketLink will consider the parent-child relationship of each group defined in the configuration.