It seems that Authentication and Authorization article (https://docs.jboss.org/author/display/MODE/Authentication+and+authorization ) needs to be updated. Authorization does not work if you use role pattern <role>=<roleName>[.<workspaceName]
Authorization works fine with role pattern(s) specified in:https://docs.jboss.org/author/display/MODE27/Using+the+JCR+API+with+ModeShape#UsingtheJCRAPIwithModeShape-JCRSecurity . Eg: ROLE_NAME.REPOSITORY_SOURCE_NAME.WORKSPACE_NAME
Tested with Modeshape 3.7.2 and PicketBox 4.0.20
