in src/main/java/org/apache/sling/auth/core/impl/AuthenticationRequirementsManager.java [300:313]
private void process(final ResourceMapper mapper, final Long id, final Action action) {
switch ( action.type ) {
case ADDED : this.addService(mapper, action.reference);
break;
case REMOVED : this.removeService((Long)action.reference.getProperty(Constants.SERVICE_ID));
break;
case MODIFIED : this.modifiedService(mapper, action.reference);
break;
case UPDATE: final List<AuthenticationRequirementHolder> list = props.get(id);
if (!list.isEmpty() ) {
this.modifiedService(mapper, list.get(0).serviceReference);
}
}
}