* @throws NamingException
*/
private void checkLookupAccess( LdapPrincipal user, Name dn, Attributes entry )
throws NamingException
{
DirectoryPartitionNexusProxy proxy = InvocationStack.getInstance().peek().getProxy();
Set userGroups = groupCache.getGroups( user.getName() );
Collection tuples = new HashSet();
addPerscriptiveAciTuples( proxy, tuples, dn, entry );
addEntryAciTuples( tuples, entry );
addSubentryAciTuples( proxy, tuples, dn, entry );