in src/main/java/org/apache/sling/jcr/resourcesecurity/impl/ResourceAccessGateFactory.java [172:174]
public GateResult canUpdate(Resource resource) {
return this.checkPermission(resource.getResourceResolver(), resource.getPath(), Session.ACTION_SET_PROPERTY);
}