code: func (r *ACLResolver) filterACL(token string, subj interface{}) error {
  	// Get the ACL from the token
  	authorizer, err := r.ResolveToken(token)
  	if err != nil {
  		return err
  	}
  
  	// Fast path if ACLs are not enabled
  	if authorizer == nil {
  		return nil
  	}
  
  	return r.filterACLWithAuthorizer(authorizer, subj)
  }
docs: // filterACL is used to filter results from our service catalog based on the
  // rules configured for the provided token.