if (fessConfig.isLdapAllowEmptyPermission()) {
            return true;
        }

        final SystemHelper systemHelper = ComponentUtil.getSystemHelper();
        for (final String permission : ldapUser.getPermissions()) {
            if (!systemHelper.isUserPermission(permission)) {
                return true;
            }
        }
        return false;
    }