From 70875a3c70aae745f35d0006513ba3268a5dac03 Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Mon, 27 Aug 2007 00:28:17 +0000 Subject: [PATCH] SEC-523: Made sentence about where GrantedAuthority objects come from a bit clearer. --- doc/docbook/acegi.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/doc/docbook/acegi.xml b/doc/docbook/acegi.xml index 8b05b282ee..5f0c03d443 100644 --- a/doc/docbook/acegi.xml +++ b/doc/docbook/acegi.xml @@ -478,8 +478,8 @@ if (obj instanceof UserDetails) { ROLE_HR_SUPERVISOR. These roles are later on configured for web authorization, method authorization and domain object authorization. Other parts of Acegi Security are capable of - interpreting these authorities, and expect them to be present. You - will usually return GrantedAuthority objects from + interpreting these authorities, and expect them to be present. + GrantedAuthority objects are usually loaded by the UserDetailsService. Usually the GrantedAuthority objects are