docs: protected Set<String> getPermittedAttributes(final IAuthorizationPrincipal principal) {
          final Set<String> attributeNames = personAttributeDao.getPossibleUserAttributeNames();
          return getPermittedAttributes(principal, attributeNames);
      }