code: public Boolean getAccessAllowed(ActionBean bean, Method handler)
  	{
  		// Determine if the event handler allows access.
  
  		LOG.debug("Determining if access is allowed for " + handler.getName() + " on " + bean.toString());
  		Boolean allowed = determineAccessOnElement(bean, handler, handler);
  
  		// If the event handler didn't decide, determine if the action bean class allows access.
  		// Rinse and repeat for all superclasses.
  
  		Class<?> beanClass = bean.getClass();
  		while (allowed == null && beanClass != null)
  		{
  			LOG.debug("Determining if access is allowed for " + beanClass.getName() + " on " + bean.toString());
  			allowed = determineAccessOnElement(bean, handler, beanClass);
  			beanClass = beanClass.getSuperclass();
  		}
  
  		// If the event handler nor the action bean class decided, allow access.
  		// This default allows access if no security annotations are used.
  
  		if (allowed == null)
  		{
  			allowed = true;
  		}
  
  		// Return the decision.
  
  		return allowed;
  	}
docs: Determines if access for the given execution context is allowed. The security manager is used to determine if
  access is allowed (to handle an event) or if access is not denied (thus allowing the display of error messages
  for binding and/or validation errors for a secured event). If the latter would not be checked, a user can (even
  if only theoretically) see an error message, correct his input, and then see an &quot;access forbidden&quot;
  message.
  <p>
  If required contextual information (like what data is affected) is not available, no decision should be made.
  This is to ensure that access is not denied when required data is missing because of a binding and/or validation
  error.
  
  @param bean    the action bean on which to perform the action
  @param handler the event handler to check authorization for
  @return {@link Boolean#TRUE} if access is allowed, {@link Boolean#FALSE} if not, and null if no decision can be made
  @see SecurityManager#getAccessAllowed(ActionBean,Method)