if (isAuthenticationRequired(action)) {
CMBPolicy policy = new CMBPolicy();
if (queue != null) {
policy.fromString(queue.getPolicy());
}
if (!actionMap.get(action).isActionAllowed(user, request, "CQS", policy)) {
throw new CMBException(CMBErrorCodes.AccessDenied, "You don't have permission for " + actionMap.get(action).getName());
}