docs: protected Set<String> getPermittedAttributes(
              final IAuthorizationPrincipal principal, final Set<String> attributeNames) {
          final Set<String> permittedAttributes = new HashSet<>();
          for (String attr : attributeNames) {
              if (principal.hasPermission(
                      IPermission.PORTAL_USERS, IPermission.VIEW_USER_ATTRIBUTE_ACTIVITY, attr)) {
                  permittedAttributes.add(attr);
              }
          }
          return permittedAttributes;
      }