final SecuredGraphImpl sg, final Iterator<Triple> it,
final Set<Action> perms )
{
final SecurityEvaluator evaluator = CachedSecurityEvaluator
.getInstance(sg.getSecurityEvaluator(), runAs);
if (!evaluator.evaluateAny(perms, sg.getModelNode(),
SecuredItemImpl.convert(Triple.ANY)))
{
// nope so wrap the iterator with security iterator
return WrappedIterator.create(it).filterKeep(
new PermTripleFilter(perms, sg, evaluator));