docs: protected final List<String> getSessionPermissions() {
          if (sessionTracker != null) {
              Session currentSession = sessionTracker.getSession();
              return (currentSession != null) ? currentSession.getPermissions() : null;
          }
          return null;
      }