You may find that the built-in annotations provided by PicketLink are not enough to represent a very specific use case or requirement of your project. In this case, you can always provide your own authorization annotations and logic.

PicketLink Authorization is based on Apache DeltaSpike Security, which means you can use its API and adapt PicketLink accordingly to your needs. For more details, please check the following documentation http://deltaspike.apache.org/security.html