Collection<? extends GrantedAuthority> authorities = auth.getAuthorities();
if (authorities != null && authorities.size() > 0) {
for (GrantedAuthority ga : authorities) {
logger.debug("Principal '{}' gained role '{}'", user.getLogin(), ga.getAuthority());
roles.add(new RoleImpl(ga.getAuthority()));
}
}
} else if (Security.ANONYMOUS_USER.equals(principal)) {
user = new Guest(site.getIdentifier());