in src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/impl/JsonConvert.java [107:125]
public static void addRestrictions(JsonObjectBuilder privilegeObj, String key, Set<LocalRestriction> restrictions) {
if (restrictions.isEmpty()) {
privilegeObj.add(key, true);
} else {
JsonObjectBuilder allowObj = Json.createObjectBuilder();
for (LocalRestriction ri : restrictions) {
if (ri.isMultiValue()) {
JsonArrayBuilder rvalues = Json.createArrayBuilder();
for (Value value: ri.getValues()) {
addTo(rvalues, value);
}
allowObj.add(ri.getName(), rvalues);
} else {
addTo(allowObj, ri.getName(), ri.getValue());
}
}
privilegeObj.add(key, allowObj);
}
}