public Authorizer getAuthorizer() {
        return authorizer;
    }
Returns the underlying wrapped <tt>Authorizer</tt> instance to which this <tt>SecurityManager</tt>
implementation delegates all of its authorization calls.

@return the wrapped <tt>Authorizer</tt> used by this <tt>SecurityManager</tt> implementation.
core/src/main/java/org/apache/shiro/mgt/AuthorizingSecurityManager.java