$rbac :
__construct( $rbac)
isAuthorized( $identity, $request)
getRequestedPermission( $request)
hasPermission( $requestedPermission)