roles = new HashSet<String>();
for ( GrantedAuthority role : auth.getAuthorities() ) {
roles.add( role.getAuthority() );
}
RowLevelSecurityHelper helper = new SessionAwareRowLevelSecurityHelper();
return helper.getOpenFormulaSecurityConstraint( rls, username, new ArrayList<String>( roles ) );
}