in src/main/java/org/apache/sling/clam/http/internal/RequestUtil.java [108:121]
static boolean isAuthorized(@NotNull final SlingHttpServletRequest request, @NotNull final Collection<String> authorizedGroups) throws Exception {
final Authorizable authorizable = request.getResourceResolver().adaptTo(Authorizable.class);
if (authorizable == null) {
return false;
}
final Iterator<Group> groups = authorizable.memberOf();
while (groups.hasNext()) {
final String id = groups.next().getID();
if (authorizedGroups.contains(id)) {
return true;
}
}
return false;
}