title: How to add a role filter on request combined with OAuth
body: <p>I would like to develop a portal which contains some modules
  The portal and each module consume data provided by a webservice based on Jersey and secured with OAuth 1.0</p>
  
  <p>For the moment I have almost implement the OAuth provider</p>
  
  <p>A user can connect to the portal and access to a module</p>
  
  <p>Each app or module has a specific access token to consume resource</p>
  
  <p>What I want to do is to add a role implementation</p>
  
  <p>For example for the module1, the user can have 2 roles (role1 and role2) but can't use the 2 roles in parallel</p>
  
  <p>First the user uses the access (module1 / user1 / role1) and he will have a token and later the user uses the access (module1 / user1 / role2) and he will have an other token</p>
  
  <p>Depending on the role, I would like to filter the request with a RolesAllowed annotation for example</p>
  
  <p>I have read this article: <a href="http://objecthunter.congrace.de/tinybo/blog/articles/89" rel="nofollow">http://objecthunter.congrace.de/tinybo/blog/articles/89</a></p>
  
  <p>When the user is authenticated to the web service I could persist in a database the username, and the role used for the module and the RolesAllowedResourceFilterFactory could use the realm to check if the user is in the role and can access to the resource</p>
  
  <p>But can I by-passed the auth method?</p>
  
  <p>Anyway I really need your help to implement this role filter thing</p>
  
  <p>I will try to give you more details if you need</p>
  
  <p>Thanks</p>