src/main/java/org/apache/sling/jackrabbit/usermanager/impl/resource/AuthorizableResourceProvider.java (1 line): - line 280: // TODO: there isn't any way to check if relPath is valid