principalsMatch
Test user/role/group names against principal names.
202203204205206207208209210211212
// explicit actions permitted anyActionsPermitted = true; // test action permission match and user/role/group principal match if (constraint.actionMatch(action) && constraint.principalsMatch(userPrincipals, rolePrincipals, groupPrincipals, true)) { actionPermitted = true; break; } }
211212213214215216217218219220221
} } else { // permissions not specified: not permitted if any principal matched if (constraint.principalsMatch(userPrincipals, rolePrincipals, groupPrincipals, false)) { actionNotPermitted = true; break; } }