* @return true if empty permissions are allowed, false otherwise
     */
    protected boolean allowEmptyGroupAndRole(final LdapUser ldapUser) {
        if (fessConfig.isLdapAllowEmptyPermission()) {
            return true;
        }

        final SystemHelper systemHelper = ComponentUtil.getSystemHelper();
        for (final String permission : ldapUser.getPermissions()) {