code: @Override
      public PolicyFinderResult findPolicy(EvaluationCtx context) {
          PolicyFinderResult policyFinderResult = null;
          PolicySet policySet = m_repositoryPolicySet;
          try {
              String pid = getPid(context);
              if (pid != null && !pid.isEmpty()) {
                  AbstractPolicy objectPolicyFromObject = 
                          m_policyLoader.loadObjectPolicy(m_policyParser.copy(),
                                                           pid,
                                                           m_validateObjectPoliciesFromDatastream);
                  if (objectPolicyFromObject != null) {
                      List<AbstractPolicy> policies = new ArrayList<AbstractPolicy>(m_repositoryPolicies);
                      policies.add(objectPolicyFromObject);
                      policySet = toPolicySet(policies, m_combiningAlgorithm);
                  }
              }
              policyFinderResult = new PolicyFinderResult(policySet);
          } catch (Exception e) {
              logger.warn("PolicyFinderModule seriously failed to evaluate a policy ", e);
              policyFinderResult =
                      new PolicyFinderResult(new Status(ERROR_CODE_LIST, e
                              .getMessage()));
          }
          return policyFinderResult;
      }
docs: Gets a deny-biased policy set that includes all repository-wide and
  object-specific policies.