}
	}

	// TestXLStorage for permission denied.
	if runtime.GOOS != globalWindowsOSName {
		permDeniedDir := createPermDeniedFile(t)
		if err = os.Chmod(permDeniedDir, 0o400); err != nil {
			t.Fatalf("Unable to change permission to temporary directory %v. %v", permDeniedDir, err)
		}

		// Initialize xlStorage storage layer for permission denied error.
		_, err = newLocalXLStorage(permDeniedDir)

        return LdapUtil.escapeValue(filter);
    }

    /**
     * Normalizes a permission name based on configuration settings.
     *
     * @param name the permission name to normalize
     * @return the normalized permission name
     */
    public String normalizePermissionName(final String name) {
        if (fessConfig.isLdapLowercasePermissionName()) {

    }

    /**
     * Gets the permission fields for Entra ID authentication.
     * Uses new entraid.permission.fields key with fallback to legacy aad.permission.fields.
     * @return Array of permission field names.
     */
    default String[] getEntraIdPermissionFields() {
        String value = getSystemProperty("entraid.permission.fields", null);
        if (StringUtil.isBlank(value)) {

						<data>
							<type>file</type>
							<src>${project.build.directory}/generated-packaging/deb/copyright</src>
							<dst>/usr/share/doc/fess/copyright</dst>
						</data>
						<!-- Adds and sets permission on default directories -->
						<data>
							<type>template</type>
							<paths>
								<path>${packaging.fess.pid.dir}</path>
							</paths>
							<mapper>
								<type>perm</type>

ldap.ignore.netbios.name=true
# Whether to allow underscores in LDAP group names.
ldap.group.name.with.underscores=false
# Whether to use lowercase for LDAP permission names.
ldap.lowercase.permission.name=false
# Whether to allow empty permissions in LDAP.
ldap.allow.empty.permission=true
# Whether to use samAccountName for LDAP group.
ldap.samaccountname.group=false

# Whether LDAP role search for user is enabled.

labels.config_parameter=Config Parameters
labels.max_access_count=Max Access Count
labels.number_of_thread=Number of Threads
labels.interval_time=Interval
labels.millisec=msec
labels.permissions=Permissions
labels.virtual_hosts=Virtual Hosts
labels.virtual_host=Virtual Host
labels.label_type=Label
labels.file_crawling_button_create=Create
labels.file_crawling_button_create_job=Create New Job

labels.config_parameter=Config Parameters
labels.max_access_count=Max Access Count
labels.number_of_thread=Number of Threads
labels.interval_time=Interval
labels.millisec=msec
labels.permissions=Permissions
labels.virtual_hosts=Virtual Hosts
labels.virtual_host=Virtual Host
labels.label_type=Label
labels.file_crawling_button_create=Create
labels.file_crawling_button_create_job=Create New Job

	if err != nil {
		writeErrorResponseJSON(ctx, w, toAdminAPIErr(ctx, err), r.URL)
		return
	}

	// Permission checks:
	//
	// 1. Any type of account (i.e. access keys (previously/still called service
	// accounts), STS accounts, internal IDP accounts, etc) with the
	// policy.UpdateServiceAccountAdminAction permission can update any service
	// account.
	//

                }

                // Update session information
                if (logger.isDebugEnabled()) {
                    logger.debug("[scheduleParentGroupLookup] Notifying permission change for user: {}", user.getName());
                }
                ComponentUtil.getActivityHelper().permissionChanged(OptionalThing.of(new FessUserBean(user)));
            } catch (final Exception e) {

}

// HeadBucketHandler - HEAD Bucket
// ----------
// This operation is useful to determine if a bucket exists.
// The operation returns a 200 OK if the bucket exists and you
// have permission to access it. Otherwise, the operation might
// return responses such as 404 Not Found and 403 Forbidden.
func (api objectAPIHandlers) HeadBucketHandler(w http.ResponseWriter, r *http.Request) {