final RoleQueryHelper roleQueryHelper = new RoleQueryHelper();

        assertNull(roleQueryHelper.cipher);
        assertEquals("\n", roleQueryHelper.valueSeparator);
        assertEquals(",", roleQueryHelper.roleSeparator);
        assertNull(roleQueryHelper.parameterKey);
        assertTrue(roleQueryHelper.encryptedParameterValue);
        assertNull(roleQueryHelper.headerKey);
        assertTrue(roleQueryHelper.encryptedHeaderValue);

import org.codelibs.fess.helper.QueryHelper;
import org.codelibs.fess.helper.RateLimitHelper;
import org.codelibs.fess.helper.RelatedContentHelper;
import org.codelibs.fess.helper.RelatedQueryHelper;
import org.codelibs.fess.helper.RoleQueryHelper;
import org.codelibs.fess.helper.SambaHelper;
import org.codelibs.fess.helper.SearchHelper;
import org.codelibs.fess.helper.SearchLogHelper;
import org.codelibs.fess.helper.SuggestHelper;

			<arg>"chat/chat.jsp"</arg>
		</postConstruct>
	</component>
	<component name="crawlingInfoHelper" class="org.codelibs.fess.helper.CrawlingInfoHelper">
	</component>
	<component name="roleQueryHelper" class="org.codelibs.fess.helper.RoleQueryHelper">
		<!-- ex. parameter: fessRoles=123%0aRadmin -->
		<!-- 
		<property name="parameterKey">"fessRoles"</property>
		<property name="encryptedParameterValue">false</property>

        RoleQueryHelper roleQueryHelper = new RoleQueryHelper();
        PermissionHelper permissionHelper = new PermissionHelper();

        ComponentUtil.register(systemHelper, "systemHelper");
        ComponentUtil.register(virtualHostHelper, "virtualHostHelper");
        ComponentUtil.register(keyMatchHelper, "keyMatchHelper");
        ComponentUtil.register(roleQueryHelper, "roleQueryHelper");

- Include `crudMode` field for CRUD operations

## Security and Authentication

- `@Secured` annotation with role array (`"admin-user"`, `"admin-user-view"`)
- Role-based query filtering via `RoleQueryHelper`
- Authentication: Local (UserService), LDAP, OIDC, SAML, SPNEGO, Entra ID
- Security features: AES encryption, SHA256 digest, LDAP injection prevention, password policy, rate limiting

## Naming Conventions

            writeJsonResponse(HttpServletResponse.SC_BAD_REQUEST, escapeJsonKeyValue(MESSAGE_FIELD, "Referer is invalid."));
            return;
        }

        final RoleQueryHelper roleQueryHelper = ComponentUtil.getRoleQueryHelper();
        final SearchHelper searchHelper = ComponentUtil.getSearchHelper();

        final StringBuilder buf = new StringBuilder(255);
        try {