Collection authorities = (Collection) SecurityContextHolder.getContext().getAuthentication().getAuthorities();