in library/src/main/java/org/apache/fineract/cn/anubis/security/ApplicationPermission.java [90:100]
boolean matches(final HttpServletRequest request,
final ApplicationName applicationName,
final AnubisPrincipal principal) {
if (!acceptTokenIntendedForForeignApplication && !applicationName.toString().equals(principal.getForApplicationName()))
return false;
boolean isSu = principal.getUser().equals(ApiConstants.SYSTEM_SU);
return matchesHelper(
request.getServletPath(),
request.getMethod(),
(matcher, segment) -> matcher.matches(segment, principal, acceptTokenIntendedForForeignApplication, isSu));
}