private Set<String> scopes;

    /**
     * Create a new filter with the specified scopes and their implied scopes enabled.
     *
     * @param scopes The scopes to enable, along with all implied scopes, may be {@code null}.
     */
    public CumulativeScopeArtifactFilter(Collection<String> scopes) {
        this.scopes = new HashSet<>();

        addScopes(scopes);
    }

    /**

			impersonationUserExtras: map[string][]string{"scopes": {"scope-a", "scope-b"}},
			expectedUser: &user.DefaultInfo{
				Name:   "system:admin",
				Groups: []string{"system:authenticated"},
				Extra:  map[string][]string{"scopes": {"scope-a", "scope-b"}},
			},
			expectedCode: http.StatusOK,
		},
		{
			name: "percent-escaped-userextras",
			user: &user.DefaultInfo{
				Name:   "dev",

import org.gradle.execution.ExecutionAccessListener
import org.gradle.internal.execution.WorkExecutionTracker
import org.gradle.internal.service.scopes.ListenerService
import org.gradle.internal.service.scopes.Scope
import org.gradle.internal.service.scopes.ServiceScope


@ServiceScope(Scope.BuildTree::class)

	"petr1708": 0x44,
	"pinyin":   0x45,
	"polyton":  0x46,
	"provenc":  0x47,
	"puter":    0x48,
	"rigik":    0x49,
	"rozaj":    0x4a,
	"rumgr":    0x4b,
	"scotland": 0x4c,
	"scouse":   0x4d,
	"simple":   0x6f,
	"solba":    0x66,
	"sotav":    0x4e,
	"spanglis": 0x4f,
	"surmiran": 0x50,
	"sursilv":  0x51,
	"sutsilv":  0x52,
	"synnejyl": 0x53,
	"tarask":   0x54,

        return scopedRegistry(scope, false)
    }

    private static ScopedServiceRegistry strictScopedRegistry(Class<? extends Scope> scope) {
        return scopedRegistry(scope, true)
    }

    private static ScopedServiceRegistry scopedRegistry(Class<? extends Scope> scope, boolean strict) {
        return new ScopedServiceRegistry(scope, strict, "test service registry")
    }

import org.gradle.internal.service.scopes.Scope
import org.gradle.internal.service.scopes.ServiceScope
import spock.lang.Specification

class ServiceRegistryBuilderTest extends Specification {

    def "creates a scope-validating service registry when setting a scope"() {
        def scopedBuilder = ServiceRegistryBuilder.builder()
            .scope(Scope.Build)

        when:
        scopedBuilder

        data = {}
        data["scopes"] = []
        for scope in form_data.scopes:
            data["scopes"].append(scope)
        if form_data.client_id:
            data["client_id"] = form_data.client_id
        if form_data.client_secret:
            data["client_secret"] = form_data.client_secret
        return data
    ```

    Note that for OAuth2 the scope `items:read` is a single scope in an opaque string.

class MavenPom {
    final Map<String, MavenScope> scopes = [:]

    MavenPom(File pomFile) {
        def pom = new XmlParser().parse(pomFile)
        pom.dependencies.dependency.each { dep ->
            def scopeElement = dep.scope
            def scopeName = scopeElement ? scopeElement.text() : "runtime"
            def scope = scopes[scopeName]
            if (!scope) {
                scope = new MavenScope()

 * Events are not visible to listeners in descendent scopes.
 *
 * <p>This annotation is used primarily to indicate to developers the scopes where this listener are available. There is also
 * some validation when a broadcaster or listener of this type is used in an incorrect scope.
 *
 * @see Scope
 */
@Retention(RetentionPolicy.RUNTIME)
@Target(ElementType.TYPE)
@Inherited
public @interface EventScope {

    public String findPluginVersionAt(ClassLoaderScope scope, String pluginId) {
        while (scope != null) {
            String pluginVersion = pluginVersionsPerScope.getOrDefault(scope.getOriginalScope(), emptyMap()).get(pluginId);
            if (pluginVersion != null) {
                return pluginVersion;
            }
            ClassLoaderScope parent = scope.getParent();
            if (scope == parent) {