return new SimpleAuthenticationInfo(user, user.getPassword(), getName());
}
@Override
protected AuthorizationInfo doGetAuthorizationInfo(PrincipalCollection principals) {
User user = (User) getAvailablePrincipal(principals);
Set<String> roles = permission.getRolesByUser(user.getUsername());
SimpleAuthorizationInfo simpleAuthorizationInfo = new SimpleAuthorizationInfo(roles);
for (String role : roles) {
Set<String> permissions = permission.getPermissionsByRole(role);
simpleAuthorizationInfo.addStringPermissions(permissions);