@RequestMapping(path = "/collection", method = GET)
 @PreAuthorize("hasAnyRole('USER', 'ADMIN')")
 public @ResponseBody Set<Collection> getOwnManagedCollections(
     @AuthenticationPrincipal UserDetails user) {
   return securityService.getManagedCollections(user.getUsername());
 }