getType(), getId()))
.evaluatePerm(
SecurityUtil.getIndices(request),
SecurityUtil.getTypes(request),
getClientHostAddress(request),
new TomcatUserRoleCallback(request
.getHttpServletRequest(),securityService.getSettings().get("security.ssl.userattribute")));
if (permLevel == PermLevel.NONE) {
SecurityUtil.send(request, channel, RestStatus.FORBIDDEN,
"No permission (at all)");