ff95a3
@@ -40,6 +40,7 @@
public class DefaultMessageSecurityExpressionHandler<T> extends AbstractSecurity
     protected SecurityExpressionOperations createSecurityExpressionRoot(Authentication authentication, Message<T> invocation) {
         MessageSecurityExpressionRoot root = new MessageSecurityExpressionRoot(authentication,invocation);
         root.setTrustResolver(trustResolver);
+        root.setRoleHierarchy(getRoleHierarchy());
         return root;
     }
 
