Major Description
The validation of ACL.addEntry(Principal principal, Privilege[] privileges, boolean isAllow, Map<String, Value> restrictions, Map<String, Value[]> mvRestrictions)
includes a check that mandatory restrictions are actually present.
However, the code performing that check only tests if the mandatory restrictions are included in the restrictions ignoring the fact that a mandatory restriction might be multi-valued and thus provided in the mvRestrictions param.
cc: stillalex fyi.