in src/main/java/org/apache/sling/jcr/base/internal/mount/ProxyAccessControlManager.java [99:106]
public void removePolicy(String absPath, AccessControlPolicy policy) throws PathNotFoundException, AccessControlException, AccessDeniedException, LockException, VersionException, RepositoryException {
if (mountSession.isMountParent(absPath) || mountSession.isMount(absPath)) {
mount.removePolicy(absPath, policy);
}
if (!mountSession.isMount(absPath)) {
delegate.removePolicy(absPath, policy);
}
}