Using a Security Proxy Bean
A security proxy bean is a Java class that is usually stored in the session as a managed bean. This bean exposes security information in a form that Expression Language can process, usually as a method called is<something>, which translates to a simple expression as in the example shown in the slide.
However, when you need to check for multiple combinations, the Expression Language becomes complex or you need many convenience methods. Additionally, you need to generate accessors for each role.