...
[10:33:13 CST(-0600)] <dmccallum54> k
[10:34:14 CST(-0600)] <dmccallum54> i think the main thing on the SSP side is that it doesn't really ever check 'roles' in the uP groups sense… think it's always checking uP permissions, which get mapped one-to-one to spring security roles/grantedauthorities