code: public Set<CmsResource> getResourcesForPrincipal(
          CmsUUID principalId,
          CmsPermissionSet permissions,
          boolean includeAttr)
      throws CmsException {
  
          return m_securityManager.getResourcesForPrincipal(getRequestContext(), principalId, permissions, includeAttr);
      }
docs: Returns all resources associated to a given principal via an ACE with the given permissions.<p>
  
  If the <code>includeAttr</code> flag is set it returns also all resources associated to
  a given principal through some of following attributes.<p>
  
  <ul>
  <li>User Created</li>
  <li>User Last Modified</li>
  </ul><p>
  
  @param principalId the id of the principal
  @param permissions a set of permissions to match, can be <code>null</code> for all ACEs
  @param includeAttr a flag to include resources associated by attributes
  
  @return a set of <code>{@link CmsResource}</code> objects
  
  @throws CmsException if something goes wrong