in geronimo-metrics-common/src/main/java/org/apache/geronimo/microprofile/metrics/common/jaxrs/SecurityValidator.java [70:74]
private boolean hasValidRole(final SecurityContext securityContext) {
return acceptedRoles == null || (securityContext != null &&
securityContext.getUserPrincipal() != null &&
acceptedRoles.stream().anyMatch(securityContext::isUserInRole));
}