in src/main/java/org/apache/sling/jcr/repoinit/impl/AclVisitor.java [107:117]
public void visitSetAclPrincipal(SetAclPrincipals s) {
final List<String> principals = s.getPrincipals();
for (AclLine line : s.getLines()) {
final List<String> paths = line.getProperty(PROP_PATHS);
if (paths != null && !paths.isEmpty()) {
setAcl(line, session, principals, paths, require(line, PROP_PRIVILEGES), line.getAction());
} else {
setRepositoryAcl(line, session, principals, require(line, PROP_PRIVILEGES), line.getAction());
}
}
}