title: How to reload authorities on user update with Spring Security
body: <p>I'm doing an application with authentication by OpenID using Spring Security.
  When user is logged-in, some authorities are loaded in his session.</p>
  
  <p>I have User with full right which can modify authorities (revoke, add roles) of others users. My question is, how to change User session authorities dynamically ? (cannot use <em>SecurityContextHolder</em> because I want to change another User session).</p>
  
  <p>Simple way : invalidate user session, but how to ?
  Better way : refresh user session with new authorities, but how to ?</p>