    protected boolean validateAccess( final Path path,
                                      final HttpServletResponse response ) {
        if ( !AntPathMatcher.filter( includes, excludes, path ) ) {
            logger.error( "Invalid credentials to path." );
            try {
                response.sendError( SC_FORBIDDEN );
            } catch ( Exception ex ) {
                logger.error( ex.getMessage() );
            }
            return false;
        }
        return true;
    }
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.