package org.acegisecurity.ui.switchuser;

 import java.util.List;

 import org.acegisecurity.Authentication;

 import org.acegisecurity.GrantedAuthority;

 import org.acegisecurity.userdetails.UserDetails;

 /**

  * Allows subclasses to modify the {@link GrantedAuthority} list that will be assigned to the principal

  * when they assume the identity of a different principal.

  *

  * <p>Configured against the {@link SwitchUserProcessingFilter}.

  *

  * @author Ben Alex

  * @version $Id$

  *

  */

 public interface SwitchUserAuthorityChanger {

     /**

      * Allow subclasses to add or remove authorities that will be granted when in switch user mode.

      *

      * @param targetUser the UserDetails representing the identity being switched to

      * @param currentAuthentication the current Authentication of the principal performing the switching

      * @param authoritiesToBeGranted all {@link GrantedAuthority} instances to be granted to the user,

      * excluding the special "switch user" authority that is used internally (guaranteed never null)

      */

     void modifyGrantedAuthorities(UserDetails targetUser, Authentication currentAuthentication, List authoritiesToBeGranted);

 }