Get users's group name once authenticated

[serenapotts]

I am using authority groups and once the user is logged in I need to do different things depending what group the user is in (there are a number of hard coded groups).

I cannot see anyway to get this information from the Authentication object retrieved by :
Authentication auth = SecurityContextHolder.getContext().getAuthenticati on();

I have the following defined in the applicationContext-security.xml. I can possibly get the group from the JdbcUserDetailsManager but I see no way to access that from java.

<authentication-manager alias="authenticationManager">
<authentication-provider>
<jdbc-user-service data-source-ref="dataSource"
group-authorities-by-username-query="..."
users-by-username-query="..."
authorities-by-username-query="..."/>
</authentication-provider>
</authentication-manager>

<beans:bean id="userDetailsManager" class="org.springframework.security.provisioning.J dbcUserDetailsManager">
<beansroperty name="dataSource" ref="dataSource"/>
<beansroperty name="authenticationManager" ref="authenticationManager"/>

<!-- enable lookup of permissions via user's group -->
<beansroperty name="enableGroups" value="true"/>

<!-- disable direct lookup of user's permissions (require lookup via group) -->
<beansroperty name="enableAuthorities" value="false"/>
</beans:bean>

[chuculu]

This one is a good example:

http://blog.jotadeveloper.com/2008/1...y-20-con-jdbc/

[serenapotts]

I already have everything configured in the applicationSecurity-context.xml as in the link you posted (I just didn't include it in the post). What I am after is a way to get the group of the user within java from a controller. I can get to the user and authorities via:

Authentication auth = SecurityContextHolder.getContext().getAuthenticati on();
User user = (User)auth.getPrincipal();
Collection<GrantedAuthority> authorities = auth.getAuthorities();

But the authorities only gives me the users roles and not their group.

Any suggestions??

[Luke Taylor]

The "groups" in this context are more of a logical construct for administering authorities. You'll need to customize the logic for loading the authorities if you want access to the groups from within the application.