in src/main/java/org/apache/sling/resourceaccesssecurity/impl/ResourceAccessSecurityImpl.java [45:50]
protected ResourceAccessSecurityImpl(final boolean defaultAllowIfNoGateMatches, List<ServiceReference<ResourceAccessGate>> resourceAccessGateRefs,
ComponentContext componentContext, String resourceAccessGateReferenceName) {
this.defaultAllowIfNoGateMatches = defaultAllowIfNoGateMatches;
// sort from highest ranked service to lowest ranked (opposite of default sorting of ServiceReference)
this.allHandlers = resourceAccessGateRefs.stream().sorted(Collections.reverseOrder()).map(ref -> new ResourceAccessGateHandler(ref, componentContext.locateService(resourceAccessGateReferenceName, ref))).collect(Collectors.toList());
}