title: Default roles in Spring Security 3.1
body: <p>The Spring 3.1 Security <code>contact</code> example uses a couple of roles in its <code>applicationContext-security.xml</code>:</p>
  
  <pre><code>&lt;intercept-url pattern="/" access="IS_AUTHENTICATED_ANONYMOUSLY"/&gt;
  &lt;intercept-url pattern="/index.jsp" access="IS_AUTHENTICATED_ANONYMOUSLY"/&gt;
  &lt;intercept-url pattern="/hello.htm" access="IS_AUTHENTICATED_ANONYMOUSLY"/&gt;
  &lt;intercept-url pattern="/login.jsp*" access="IS_AUTHENTICATED_ANONYMOUSLY"/&gt;
  &lt;intercept-url pattern="/switchuser.jsp" access="ROLE_SUPERVISOR"/&gt;
  &lt;intercept-url pattern="/j_spring_security_switch_user" access="ROLE_SUPERVISOR"/&gt;
  &lt;intercept-url pattern="/**" access="ROLE_USER"/&gt;
  </code></pre>
  
  <p>Where are these IS_AUTHENTICATED_ANONYMOUSLY, ROLE_SUPERVISOR, ROLE_USER roles defined? Are these default roles create by Spring Security? </p>