title: Is it possible to invalidate a spring security session?
body: <p>I'm using Tomcat 6.0.32, Spring Security 3.0.5</p>
  
  <p>In my web app some users have the ability to change other users privileges.  When this happens I would like to invalidate any session for the user whose privileges were changed.  Is this possible and if so how?</p>