final String domainObjectExpression = attributeValue.substring(0,separatorPos).trim();
final String permissionsExpression = attributeValue.substring(separatorPos + 2).trim();
final IStandardExpressionParser expressionParser = StandardExpressions.getExpressionParser(configuration);
final IStandardExpression domainObjectExpr =
getExpressionDefaultToLiteral(expressionParser, configuration, arguments, domainObjectExpression);
final IStandardExpression permissionsExpr =
getExpressionDefaultToLiteral(expressionParser, configuration, arguments, permissionsExpression);
final Object domainObject = domainObjectExpr.execute(configuration, arguments);
final Object permissionsObject = permissionsExpr.execute(configuration, arguments);
final String permissionsStr =
(permissionsObject == null? null : permissionsObject.toString());
return AclAuthUtils.authorizeUsingAccessControlList(
domainObject, applicationContext, permissionsStr, authentication, servletContext);