import javax.jcr.security.AccessControlList; //导入依赖的package包/类
@Test
public void testGetEffectiveModifiedPolicy() throws Exception {
    ACL acl = setupPolicy(testPath);
    AccessControlEntry[] aces = acl.getAccessControlEntries();
    root.commit();

    acl.addAccessControlEntry(EveryonePrincipal.getInstance(), privilegesFromNames(PrivilegeConstants.JCR_VERSION_MANAGEMENT));
    acMgr.setPolicy(testPath, acl);

    AccessControlPolicy[] policies = acMgr.getEffectivePolicies(testPath);
    assertNotNull(policies);
    assertEquals(1, policies.length);
    assertTrue(policies[0] instanceof AccessControlList);
    AccessControlEntry[] effectiveAces = ((AccessControlList) policies[0]).getAccessControlEntries();
    assertArrayEquals(aces, effectiveAces);
    assertFalse(Arrays.equals(effectiveAces, acl.getAccessControlEntries()));
}
 

import javax.jcr.security.AccessControlList; //导入依赖的package包/类
@Test(expected = AccessDeniedException.class)
public void testUpdateDenied() throws RepositoryException {
    final FedoraResource object =
            containerService.findOrCreate(session, "/testRefObject");
    try {
        object.updateProperties(
                subjects,
                "INSERT { <> <http://purl.org/dc/elements/1.1/title> \"test-original\". }"
                        + " WHERE { }", object.getTriples(subjects, emptySet()));
    } catch (final AccessDeniedException e) {
        fail("Should fail at update, not create property");
    }
    final Session jcrSession = getJcrSession(session);
    final AccessControlManager acm = jcrSession.getAccessControlManager();
    final Privilege[] permissions = new Privilege[] {acm.privilegeFromName(Privilege.JCR_READ)};
    final AccessControlList acl = (AccessControlList) acm.getApplicablePolicies("/testRefObject").next();
    acl.addAccessControlEntry(SimplePrincipal.newInstance("anonymous"), permissions);
    acm.setPolicy("/testRefObject", acl);
    session.commit();

    object.updateProperties(
            subjects,
            "INSERT { <> <http://purl.org/dc/elements/1.1/title> \"test-update\". }"
                    + " WHERE { }", object.getTriples(subjects, emptySet()));
}
 

import javax.jcr.security.AccessControlList; //导入依赖的package包/类
private void assertAcAction(Authorizable a, String expectedPrivName) throws Exception {
    AccessControlManager acMgr = getAccessControlManager(root);
        AccessControlPolicy[] policies = acMgr.getPolicies(a.getPath());
        assertEquals(1, policies.length);
        assertTrue(policies[0] instanceof AccessControlList);
        AccessControlList acl = (AccessControlList) policies[0];
        assertEquals(1, acl.getAccessControlEntries().length);
        assertArrayEquals(new Privilege[]{getPrivilegeManager(root).getPrivilege(expectedPrivName)}, acl.getAccessControlEntries()[0].getPrivileges());
}