code: public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
  		HttpServletRequest hreq = (HttpServletRequest)request;
  		HttpServletResponse hresp = (HttpServletResponse)response;
  		String perm = aaf_type+hreq.getPathInfo()+'|'+hreq.getMethod();
  		if(hreq.isUserInRole(perm)) {
  			chain.doFilter(request, response);
  		} else {
  			log.audit("PathFilter has denied",hreq.getUserPrincipal().getName(),"access to",perm);
  			hresp.sendError(403,not_authorized_msg);
  		}
  	}
docs: TODO Always validate changes against Tomcat AbsCadiValve and Jaspi CadiSAM functions