I'm doing an application with authentication by OpenID using Spring Security. When user is logged-in, some authorities are loaded in his session. I have User with full right which can modify authorities (revoke, add roles) of others users. My question is, how to change User session authorities dynamically ? (cannot use SecurityContextHolder because I want to change another User session). Simple wa