assertTrue(pt.size() == 1);
assertSamePrivileges(privileges, pt.getAccessControlEntries()[0].getPrivileges());
// revoke the 'READ' privilege
privileges = privilegesFromName(Privilege.JCR_READ);
assertTrue(pt.addEntry(testPrincipal, privileges, false, restrictions));
// net-effect: 2 entries one allowing ADD_CHILD_NODES, the other denying READ
assertTrue(pt.size() == 2);
assertSamePrivileges(privilegesFromName(Privilege.JCR_ADD_CHILD_NODES),
pt.getAccessControlEntries()[0].getPrivileges());
assertSamePrivileges(privilegesFromName(Privilege.JCR_READ),