{% if (is_expr_granted("hasRole('FOO')")) -%} granted {%- else -%} denied {%- endif %}