protected function checkCredentials(ModelInterface $model, Step $step)
    {
        $roles = $step->getRoles();

        if (!empty($roles) && !$this->authorizationChecker->isGranted($roles, $model->getWorkflowObject())) {
            throw new AccessDeniedException($step->getName());
        }
    }