EDIT

import org.apache.log4j.Logger;

import org.springframework.security.core.userdetails.UserDetails;

import org.springframework.security.web.authentication.preauth.PreAuthenticatedAuthenticationToken;

import eu.etaxonomy.cdm.model.common.User;

import eu.etaxonomy.cdm.persistence.hibernate.permission.CdmAuthority;

import eu.etaxonomy.cdm.persistence.hibernate.permission.CdmAuthorityParsingException;

    public static final Logger logger = Logger.getLogger(CdmUserHelper.class);

    /**

     * @param username

     * @param cdmType

     * @param entitiyId

     * @param crud

     * @return

     */

    @Override

    public void createAuthorityFor(String username, Class<? extends CdmBase> cdmType, Integer entitiyId, EnumSet<CRUD> crud) {

        UserDetails userDetails = repo.getUserService().loadUserByUsername(username);

        if(userDetails != null){

            User user = (User)userDetails;

            CdmBase entity = repo.getCommonService().find(cdmType, entitiyId);

            CdmAuthority authority = new CdmAuthority(entity, crud);

            try {

                user.getGrantedAuthorities().add(authority.asNewGrantedAuthority());

            } catch (CdmAuthorityParsingException e) {

                throw new RuntimeException(e);

            }

            repo.getSession().flush();

            logger.debug("new authority for " + username + ": " + authority.toString());

            Authentication authentication = new PreAuthenticatedAuthenticationToken(user, user.getPassword(), user.getAuthorities());

            SecurityContextHolder.getContext().setAuthentication(authentication);

            logger.debug("security context refreshed with user " + username);

        }

    }

    /**

     * @param cdmType

     * @param entitiyId

     * @param crud

     * @return

     */

    @Override

    public void createAuthorityForCurrentUser(Class<? extends CdmBase> cdmType, Integer entitiyId, EnumSet<CRUD> crud) {

        createAuthorityFor(userName(), cdmType, entitiyId, crud);

    }