in src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/post/ModifyPrincipalAceServlet.java [192:209]
protected String removeAces(@NotNull String resourcePath, @Nullable String order, @NotNull Principal principal,
@NotNull JackrabbitAccessControlList acl) throws RepositoryException {
AccessControlEntry[] existingAccessControlEntries = acl.getAccessControlEntries();
for (int j = 0; j < existingAccessControlEntries.length; j++) {
AccessControlEntry ace = existingAccessControlEntries[j];
@Nullable
JackrabbitAccessControlEntry jrEntry = getJackrabbitAccessControlEntry(ace, resourcePath, principal);
if (jrEntry != null) {
if (order == null || order.length() == 0) {
//order not specified, so keep track of the original ACE position.
order = String.valueOf(j);
}
acl.removeAccessControlEntry(ace);
}
}
return order;
}