func (sys *IAMSys) createCleanEntitiesQuery(q madmin.PolicyEntitiesQuery, ldap bool) cleanEntitiesQuery {
	cleanQ := cleanEntitiesQuery{
		Users:    make(map[string]set.StringSet),
		Groups:   set.CreateStringSet(q.Groups...),
		Policies: set.CreateStringSet(q.Policy...),
	}

	if ldap {
		// Validate and normalize users, then fetch and normalize their groups

  integrity sha512-U9h1NLROZTq9uE1SNffn6WuPDg8icmi3ns4rEl/oTfIle4iLjTliCzgTsbaIFMq/Xn078/lfY/BL0GWZ+psK4Q==

normalize-path@^3.0.0, normalize-path@~3.0.0:
  version "3.0.0"
  resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
  integrity sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==

     * First, this method resolves the given root against the {@linkplain #getBaseDirectory() base directory},
     * then normalizes the path. If a source already exists for the same scope, language and normalized directory,
     * this method does nothing. Otherwise, the normalized directory is added as a new {@link SourceRoot} element.
     *
     * @param scope scope (main or test) of the directory to add

        }
        return normalizeCanonicalUrl(responseData.getUrl(), canonicalUrl);
    }

    /**
     * Normalizes the canonical URL relative to the base URL.
     *
     * @param baseUrl the base URL
     * @param canonicalUrl the canonical URL to normalize
     * @return the normalized canonical URL
     */
    protected String normalizeCanonicalUrl(final String baseUrl, final String canonicalUrl) {
        try {

        try {
            URI uri = new URI(url);
            if (StringUtil.isNotEmpty(location)) {
                uri = uri.resolve(location.replace(" ", "%20"));
            }
            return uri.normalize().toASCIIString();
        } catch (URISyntaxException e) {
            throw new CrawlingAccessException(e);
        }
    }

    /**
     * Sets the connection timeout in milliseconds.
     *

                // parentData.setModel( interpolatedParent );
                parentData.setVersion(interpolatedParent.getVersion());
            }
        }

        // url normalization
        modelUrlNormalizer.normalize(resultModel, request);

        // Now the fully interpolated model is available: reconfigure the resolver
        configureResolver(request.getModelResolver(), resultModel, problems, true);

                sb.append(curChar);
            }
        }
        return sb.toString();
    }

    /**
     * Normalizes a permission name based on configuration settings.
     *
     * @param name the permission name to normalize
     * @return the normalized permission name
     */
    public String normalizePermissionName(final String name) {
        if (fessConfig.isLdapLowercasePermissionName()) {

            str = str.substring(1, length - 1);
        }

        return str;
    }

    private static Path getCanonicalPath(Path path) {
        return path.toAbsolutePath().normalize();
    }

    static class ExitException extends Exception {
        int exitCode;

        ExitException(int exitCode) {
            this.exitCode = exitCode;
        }
    }

certifi==2025.1.31 \
    --hash=sha256:3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651 \
    --hash=sha256:ca78db4565a652026a4db2bcdf68f2fb589ea80d0be70e03929ed730746b84fe
    # via requests
charset-normalizer==3.4.1 \
    --hash=sha256:0167ddc8ab6508fe81860a57dd472b2ef4060e8d378f0cc555707126830f2537 \
    --hash=sha256:01732659ba9b5b873fc117534143e4feefecf3b2078b0a6a2e925271bb6f4cfa \

certifi==2025.1.31 \
    --hash=sha256:3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651 \
    --hash=sha256:ca78db4565a652026a4db2bcdf68f2fb589ea80d0be70e03929ed730746b84fe
    # via requests
charset-normalizer==3.4.1 \
    --hash=sha256:0167ddc8ab6508fe81860a57dd472b2ef4060e8d378f0cc555707126830f2537 \
    --hash=sha256:01732659ba9b5b873fc117534143e4feefecf3b2078b0a6a2e925271bb6f4cfa \