Finding user role inside a business method

[jimpo]

Let's say I am in a business method SomeRandomService.doOperationXyz(int someparam). The method does not get user's authorization or any security -related data as parameters.

Can I access current user's roles somehow? Does acegi offer some interface for this purpose? I understand current authorization is bound to ThreadLocal, so this should be possible?

What I want to achieve is

class SomeRandomService {
  public void doOperationXyz(int someparam) {
    doBasicStuff();
    if (current user has role "ADMIN") {
      doAdminStuff();
    }

I already posted thread

http://forum.springframework.org/showthread.php?t=46733

but I guess my question was too vague or something...

[igotmilk]

You can get a grantedAuthorities set and the loop through the list of granted authorities to match your condition.

GrantedAuthorities[] auths = SecurityContextHolder.getContext().getAuthentication().getAuthorities();

Alternately, not sure if this will work but you can try casting the Authentication object into a AbstractAdapterAuthenticationToken and then using the isUserInRole method.