anchor.diff:  <% end -%>
   <% if client.keycloak_repository.repository.syncrecord? -%>
       if ( path.startsWith( <%= client.keycloak_repository.repository.jaxrs.qualified_abstract_application_name %>.APPLICATION_PATH + '/' + iris.syncrecord.server.rest.SyncStatusService.PATH_PREFIX ) )
  +    {
  +      return false;
  +    }
  +    if ( _disableSyncServiceProtection && path.startsWith( <%= client.keycloak_repository.repository.jaxrs.qualified_abstract_application_name %>.APPLICATION_PATH + "/sync" ) )
       {
         return false;
       }
  
positive.code: {
  <% if client.keycloak_repository.repository.imit? -%>
    private boolean _disableSessionServiceProtection;
  
    @javax.annotation.PostConstruct
    protected void postConstruct()
    {
      try
      {
        _disableSessionServiceProtection = new javax.naming.InitialContext().lookup( "<%= Reality::Naming.underscore(client.keycloak_repository.repository.name) -%>/env/disable_session_service_protection" ).equals( Boolean.TRUE );
  
negative.code:     {
        //Ignored.
      }
  <% end -%>
  <% if client.keycloak_repository.repository.syncrecord? -%>
      try
      {
        _disableSyncServiceProtection = new javax.naming.InitialContext().lookup( "<%= Reality::Naming.underscore(client.keycloak_repository.repository.name) -%>/env/disable_sync_service_protection" ).equals( Boolean.TRUE );
      }
      catch ( final java.lang.Exception e )
      {
        //Ignored.
      }
  <% end -%>
    }
  
    @Override
    public boolean shouldProtectRequest( @javax.annotation.Nonnull final javax.servlet.ServletRequest request )
    {
  