AccessControl ac = AccessControl.getAccessControl(request);