The 'mode names' technique that was used in Shiro is because Shiro .ini configuration does not have the ability to reference ENUM values directly.

Spring however has this capability - either directly or using Spring Expression Language.

We should not have a 'mode names' property, but instead have a 'modes' property that takes a Set<RoleMode> that Spring users can specify directly.