// we only support 1 ACL per node; therefore if the node already has an ACL, we don't want to allow any additional
// ones
return AccessControlPolicyIteratorImpl.EMPTY;
}
// the node doesn't have an ACL yet, so return a new, empty ACL which can be used by clients to set privileges
return new AccessControlPolicyIteratorImpl(new JcrAccessControlList(this, absPath));
}