@awoods is right, and what's more, the assertEquals form makes the purpose of the test more obvious. Also, I'm starting to wonder if some of the constants in ServletContainerAuthenticationProvider might be factored into an enum. Specifically, EVERYONE, FEDORA_ADMIN_ROLE, and FEDORA_USER_ROLE. Some kind of enum ServletContainerAuthenticationProvider.UniversalRoles or the like...