Spring Security Access角色

Question

我有一个使用spring security在spring web flow上运行的j2ee web应用程序。如何在运行期间更改我在会话中保存的角色？

Answer 1

如果有可能，那就是这样的：

SecurityContext context = SecurityContextHolder.getContext();
Object principal = context.getAuthentication().getPrincipal();
Object credentials = context.getAuthentication().getCredentials();
GrantedAuthority[] authorities = new GrantedAuthority[1];

authorities[0] = new GrantedAuthorityImpl("MY_NEW_ROLE");

Authentication auth = new UsernamePasswordAuthenticationToken(
    principal, credentials, authorities);
SecurityContextHolder.getContext().setAuthentication(auth);