docs: private Iterator getGroupsForPrincipal(IAuthorizationPrincipal principal)
              throws GroupsException {
          IGroupMember gm = getGroupMemberForPrincipal(principal);
          return gm.getAncestorGroups().iterator();
      }