code: private boolean doRequiredFlagsMatch(final List<AceFlag> aceFlags, final AceFlag requiredFlag) {
          boolean res = true;
          if (requiredFlag != null) {
              // aceFlags could be null if the ACE applies to 'this object only' and has no other flags set
              if (aceFlags == null || aceFlags.isEmpty() || !aceFlags.contains(requiredFlag)) {
                  res = false;
              }
          } else if (aceFlags != null && !aceFlags.isEmpty()) {
              res = false;
          }
          LOG.debug("doRequiredFlagsMatch, result: {}", res);
          return res;
      }
docs: Checks whether the AceFlags attribute of the ACE contains the given AceFlag of the AceAssertion. If the
  {@code requiredFlag} is null, yet the {@code aceFlags} are not (or empty), or vice versa, or they do not contain
  the required flag, a false result is returned.
  
  @param aceFlags
  list of AceFlags from the ACE
  @param requiredFlag
  AceFlag required by the AceAssertion (e.g., {@code AceFlag.CONTAINER_INHERIT_ACE})
  @return true if match, false if not