Index: oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/accesscontrol/ACL.java
IDEA additional info:
Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
<+>UTF-8
===================================================================
--- oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/accesscontrol/ACL.java	(revision 1854959)
+++ oak-core/src/main/java/org/apache/jackrabbit/oak/security/authorization/accesscontrol/ACL.java	(date 1551965851000)
@@ -120,15 +120,15 @@
         } else {
             rs = new HashSet<>();
             if (restrictions != null) {
-                for (String jcrName : restrictions.keySet()) {
-                    String oakName = getNamePathMapper().getOakName(jcrName);
-                    rs.add(getRestrictionProvider().createRestriction(getOakPath(), oakName, restrictions.get(oakName)));
+                for (Map.Entry<String, Value> restrEntry : restrictions.entrySet()) {
+                    String oakName = getNamePathMapper().getOakName(restrEntry.getKey());
+                    rs.add(getRestrictionProvider().createRestriction(getOakPath(), oakName, restrEntry.getValue()));
                 }
             }
             if (mvRestrictions != null) {
-                for (String jcrName : mvRestrictions.keySet()) {
-                    String oakName = getNamePathMapper().getOakName(jcrName);
-                    rs.add(getRestrictionProvider().createRestriction(getOakPath(), oakName, mvRestrictions.get(oakName)));
+                for (Map.Entry<String, Value[]> restrEntry : mvRestrictions.entrySet()) {
+                    String oakName = getNamePathMapper().getOakName(restrEntry.getKey());
+                    rs.add(getRestrictionProvider().createRestriction(getOakPath(), oakName, restrEntry.getValue()));
                 }
             }
         }