code: func (f *aclFilter) allowSession(node string) bool {
  	if !f.enforceVersion8 {
  		return true
  	}
  	return f.authorizer.SessionRead(node)
  }
docs: // allowSession is used to determine if a session for a node is accessible for
  // an ACL.