| A domain object instance will usually have multiple BasicAclEntrys. Each separate
BasicAclEntry applies to a particular "recipient". Typical examples of recipients include (but do
not necessarily have to include) usernames, role names, complex granted authorities etc.It is
essential that only one BasicAclEntry exists for a given recipient. Otherwise conflicts as to
the mask that should apply to a given recipient will occur.
This method indicates which recipient this BasicAclEntry applies to. The returned
object type will vary depending on the type of recipient. For instance, it might be a String
containing a username, or a GrantedAuthorityImpl containing a complex granted authority that is
being granted the permissions contained in this access control entry. The
EffectiveAclsResolver and
BasicAclProvider.getAcls(Objectorg.acegisecurity.Authentication) can process the different recipient
types and return only those that apply to a specified Authentication object.
the recipient of this access control list entry (never null) |