in src/main/java/org/apache/sling/jcr/repoinit/impl/AclVisitor.java [71:86]
private void setAcl(AclLine line, Session s, List<String> principals, List<String> paths, List<String> privileges, AclLine.Action action) {
try {
if (action == AclLine.Action.REMOVE) {
report("remove not supported. use 'remove acl' instead.");
} else if (action == AclLine.Action.REMOVE_ALL) {
AclUtil.removeEntries(s, principals, paths);
} else {
final boolean isAllow = line.getAction().equals(AclLine.Action.ALLOW);
log.info("Adding ACL '{}' entry '{}' for {} on {}", isAllow ? "allow" : "deny", privileges, principals, paths);
List<RestrictionClause> restrictions = line.getRestrictions();
AclUtil.setAcl(s, principals, paths, privileges, isAllow, restrictions);
}
} catch (Exception e) {
report(e,"Failed to set ACL (" + e.toString() + ") " + line);
}
}