// access mask encoding
    /**
     * Permission to read data from the file.
     */
    int FILE_READ_DATA = 0x00000001; // 1
    /**
     * Permission to write data to the file.
     */
    int FILE_WRITE_DATA = 0x00000002; // 2
    /**
     * Permission to append data to the file.
     */
    int FILE_APPEND_DATA = 0x00000004; // 3
    /**
     * Permission to read extended attributes.
     */

    /**
     * Permission to read extended attributes
     */
    int FILE_READ_EA = 0x00000008; // 4
    /**
     * Permission to write extended attributes
     */
    int FILE_WRITE_EA = 0x00000010; // 5
    /**
     * Permission to execute a file or traverse a directory
     */
    int FILE_EXECUTE = 0x00000020; // 6
    /**
     * Permission to delete a file or directory
     */
    int FILE_DELETE = 0x00000040; // 7

            return null;
        }
        if (permission.startsWith(fessConfig.getRoleSearchUserPrefix())
                && permission.length() > fessConfig.getRoleSearchUserPrefix().length()) {
            return aclPrefix + userPrefix + permission.substring(fessConfig.getRoleSearchUserPrefix().length());
        }
        if (permission.startsWith(fessConfig.getRoleSearchGroupPrefix())

    /** Permission to read file attributes */
    public static final int FILE_READ_ATTRIBUTES = 0x00000080; // 8
    /** Permission to write file attributes */
    public static final int FILE_WRITE_ATTRIBUTES = 0x00000100; // 9
    /** Standard delete permission */
    public static final int DELETE = 0x00010000; // 16
    /** Permission to read the security descriptor */
    public static final int READ_CONTROL = 0x00020000; // 17

     *
     * @return size in bytes
     */
    public int getSize() {
        return buffer.limit();
    }

    /**
     * Check if region has specific access permission
     *
     * @param access access permission to check
     * @return true if access is allowed, false otherwise
     */
    public boolean hasAccess(RdmaAccess access) {
        return accessFlags.contains(access);
    }

        LOGIN_FAILURE,
        /**
         * The update permission action.
         */
        UPDATE_PERMISSION;
    }

    /**
     * Set the logger name.
     * @param loggerName The logger name.
     */
    public void setLoggerName(final String loggerName) {
        this.loggerName = loggerName;
    }

    /**
     * Set the permission separator.

        // nothing
    }

    /**
     * Checks if the current user has permission to access the given resource.
     * For admin actions, verifies that the user has appropriate admin roles or
     * meets the secured annotation requirements.
     *
     * @param resource the login handling resource to check permission for
     * @throws LoginRequiredException if login is required

    }

    /**
     * Checks if a permission string is a user permission.
     *
     * @param permission The permission string.
     * @return true if it is a user permission, false otherwise.
     */
    public boolean isUserPermission(final String permission) {
        if (StringUtil.isNotBlank(permission)) {
            return permission.startsWith(ComponentUtil.getFessConfig().getRoleSearchUserPrefix());

--------------------------------------------------------------------------------
https://github.com/lmenezes/elasticsearch-kopf

The MIT License (MIT)

Copyright (c) 2014 Leonardo Menezes

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights

     *
     * @param searchRequestParams The search request parameters
     * @param data The search render data to populate with results
     * @param userBean Optional user information for permission checking
     */
    public void search(final SearchRequestParams searchRequestParams, final SearchRenderData data,
            final OptionalThing<FessUserBean> userBean) {