in src/main/java/org/apache/sling/jcr/classloader/internal/ClassLoaderWriterImpl.java [194:209]
public Session createSession() throws RepositoryException {
// get an administrative session for potential impersonation
final Session admin = this.repository.loginAdministrative(null);
// do use the admin session, if the admin's user id is the same as owner
if (admin.getUserID().equals(this.classLoaderOwner)) {
return admin;
}
// else impersonate as the owner and logout the admin session again
try {
return admin.impersonate(new SimpleCredentials(this.classLoaderOwner, new char[0]));
} finally {
admin.logout();
}
}