public boolean authorize(String operation, String region, String[] keys) {
    boolean authorized = false;
    for (String key : keys) {
      authorized = authorize("DATA", operation, region, key);
      if (!authorized) {
        return false;
      }
    }
    return true;
  }
calls used in @PreAuthorize tag needs to return a boolean
geode-web-api/src/main/java/org/apache/geode/rest/internal/web/security/RestSecurityService.java