// none of john's roles has DELETE permission, so he should not be able to delete resource 0.
assertFalse(provider.isAccessGranted(this.resources[0], this.identity, BasicACLPermission.DELETE));
// now create a new identity for john that has no roles. The role-based provider should now use the
// identity name (default impl) when checking for permissions.
Identity identity = IdentityFactory.createIdentity("john");
assertTrue(provider.isAccessGranted(this.resources[1], identity, new CompositeACLPermission(BasicACLPermission
.values())));
// access should be denied to resource 0, as that one has an ACL based on the roles.
assertFalse(provider.isAccessGranted(this.resources[0], identity, BasicACLPermission.READ));
}