public Set<String> getRoles() {
        return roles;
    }
Creates a new instance with the specified roles and no permissions.

@param roles the roles assigned to the realm account.
core/src/main/java/org/apache/shiro/authz/SimpleAuthorizationInfo.java