more description on security model
diff --git a/README-SECURITY-MODEL.md b/README-SECURITY-MODEL.md
index 31e5b8b..d7916f4 100644
--- a/README-SECURITY-MODEL.md
+++ b/README-SECURITY-MODEL.md
@@ -39,7 +39,7 @@
A typical deployment:
- (*REST/JSON Client*)<--https-->Servlet Container(*FortressRealm*/*FortressREST*)<--in-process-->(*FortressCore*)<--ldaps-->(*DirectoryServer*)
+ (*REST/JSON Client*)<--https-->(Servlet Container(*FortressRealm*/*FortressREST*)<--in-process-->(*FortressCore*))<--ldaps-->(*DirectoryServer*)
* REST/JSON Client is any HTTP interface that supports the Apache Fortress message formats.
* Servlet Container is Apache Tomcat.
