code: private List<ConfigAttribute> getConfigAttributeDefinition(Authorizable controlledObject)
      {
          // first check on global override
          if (configAttributeDefinition != null)
              return configAttributeDefinition;
  
          if (controlledObject instanceof Secured)
          {
              Secured securedObject = (Secured) controlledObject;
              if(securedObject.getSecurityControllerId() != null) {
                  String securityControllerId = securedObject.getSecurityControllerId();
                  List<ConfigAttribute> cad = idConfigAttributeDefinitionMap.get(securityControllerId);
                  if (cad != null)
                       return cad;
              }
              if(securedObject.getAuthorities() != null) {
                  return SecurityConfig.createList(((AuthorityConfigurable) controlledObject).getAuthorities());
              }
          } else if(controlledObject instanceof FormModel) {
              FormModel formModel = (FormModel) controlledObject;
              if(formModel.getId() != null) {
                  String securityControllerId = formModel.getId() + ".edit";
                  List<ConfigAttribute> cad = idConfigAttributeDefinitionMap.get(securityControllerId);
                  if (cad != null)
                      return cad;
              }
          }
          return null;
      }
docs: Get the ConfigAttributeDefinitions with following strategy:
  
  <ol>
  <li>Check the property configAttributeDefinition. If set, this one
  overrides all others.</li>
  <li>Check the configAttributeDefinitionMap. Use the securityControllerId
  of the object to find the appropriate configs. When this
  SecurityController is set up as fallback, the securityControllerId of
  Authorizable objects can be used to link them to a particular
  ActionCluster.</li>
  <li>Check if the controlledObject is actually an
  ActionClusterConfigurable object. If it is, it probably has it's own set
  of ActionClusters defined, so return a configAttributeDefinition object
  conform to this property.
  </ol>