code: protected void runAuthorization()
      {
          // Install the decision
          for (Iterator iter = controlledObjects.iterator(); iter.hasNext();)
          {
              WeakReference ref = (WeakReference) iter.next();
  
              Authorizable controlledObject = (Authorizable) ref.get();
              if (controlledObject == null)
              {
                  // Has been GCed, remove from our list
                  iter.remove();
              }
              else
              {
                  updateControlledObject(controlledObject, shouldAuthorize(getLastAuthentication(),
                          controlledObject));
              }
          }
      }
docs: securityAwareConfigurer
  Update the authorization of all controlled objects.