// test allows
assertEquals("clerk role can view", true, securityEntry.allowsRole("clerk", "view"));
assertEquals("manager role can view", true, securityEntry.allowsRole("manager", "view"));
assertEquals("anonymous role can NOT view", false, securityEntry.allowsRole("anonymous", "view"));
assertEquals("fred user can view", true, securityEntry.allowsUser("fred", "view"));
assertEquals("joe user can view", true, securityEntry.allowsUser("joe", "view"));
assertEquals("anonymous user can NOT view", false, securityEntry.allowsUser("anonymous", "view"));
// Customize has <allow-id user="*"/>
assertEquals("clerk role can NOT customize", false, securityEntry.allowsRole("clerk", "customize"));
assertEquals("joe user can customize", true, securityEntry.allowsUser("joe", "customize"));