It would be helpful to have an AuthorizationManager that takes the needed authorities as context.
Something like (pseudocode):
AuthorizationManager<Collection<String>> manager = (authentication, authorities) ->
(authentication hasAnyAuthority authorities) ? granted : denied;