diff --git a/doc/docbook/acegi.xml b/doc/docbook/acegi.xml index 26ddbe61ee..3f4a90f75a 100644 --- a/doc/docbook/acegi.xml +++ b/doc/docbook/acegi.xml @@ -2488,20 +2488,20 @@ public boolean supports(Class clazz); The AbstractSecurityInterceptor is able to temporarily replace the Authentication object in the SecurityContext and - SecurityContextHolder during the - SecurityInterceptorCallback. This only occurs if - the original Authentication object was successfully - processed by the AuthenticationManager and + SecurityContextHolder during the secure object + callback phase. This only occurs if the original + Authentication object was successfully processed by + the AuthenticationManager and AccessDecisionManager. The RunAsManager will indicate the replacement Authentication object, if any, that should be used during the SecurityInterceptorCallback. By temporarily replacing the Authentication - object during a SecurityInterceptorCallback, the - secured invocation will be able to call other objects which require - different authentication and authorization credentials. It will also - be able to perform any internal security checks for specific + object during the secure object callback phase, the secured invocation + will be able to call other objects which require different + authentication and authorization credentials. It will also be able to + perform any internal security checks for specific GrantedAuthority objects. Because Acegi Security provides a number of helper classes that automatically configure remoting protocols based on the contents of the