{% if (is_expr_granted("hasRole('FOO')")) -%}
granted
{%- else -%}
denied
{%- endif %}