for(BasicACLPermission permission : BasicACLPermission.values())
assertEquals(AuthorizationContext.DENY, jam.authorize(resource1, identity, permission));
// check that Regular_User has READ and UPDATE permissions on resource2.
assertEquals(AuthorizationContext.PERMIT, jam.authorize(resource2, identity, BasicACLPermission.READ));
assertEquals(AuthorizationContext.PERMIT, jam.authorize(resource2, identity, BasicACLPermission.UPDATE));
assertEquals(AuthorizationContext.PERMIT, jam.authorize(resource2, identity, new CompositeACLPermission(
BasicACLPermission.READ, BasicACLPermission.UPDATE)));
assertEquals(AuthorizationContext.DENY, jam.authorize(resource2, identity, BasicACLPermission.CREATE));
assertEquals(AuthorizationContext.DENY, jam.authorize(resource2, identity, BasicACLPermission.DELETE));
assertEquals(AuthorizationContext.DENY, jam.authorize(resource2, identity, new CompositeACLPermission(