Spring Security Access role

Question

hi. I have a j2ee web application running on spring web flow using spring security. How do I change during runtime my Role saved in the session?

Answer 1

If it's possible, it would be something like this:

SecurityContext context = SecurityContextHolder.getContext();
Object principal = context.getAuthentication().getPrincipal();
Object credentials = context.getAuthentication().getCredentials();
GrantedAuthority[] authorities = new GrantedAuthority[1];

authorities[0] = new GrantedAuthorityImpl("MY_NEW_ROLE");

Authentication auth = new UsernamePasswordAuthenticationToken(
    principal, credentials, authorities);
SecurityContextHolder.getContext().setAuthentication(auth);