private boolean isAllowedByDefault(Method method, Object target) {
    String methodName = method.getName();
    Set<Class> allowedClasses = allowedMethodsPerClass.get(methodName);

    if (allowedClasses == null) {
      return false;
    }

    for (Class<?> clazz : allowedClasses) {
      if (clazz.isAssignableFrom(target.getClass())) {
        return true;
      }
    }

    return false;
  }
Creates a {@code RestrictedMethodAuthorizer} object and initializes it so it can be safely
used in a multi-threaded environment.
<p>

If the {@link Cache} instance passed as parameter was previously created by Geode, the
authorizer will use the security service already configured in order to determine whether a
specific user has read privileges upon a particular region.
If the {@link Cache} instance passed as parameter is a wrapper created by external frameworks,
the authorizer will create a new instance of the security service using the configuration
properties used to initialize the cache.
<p>

Applications can also use this constructor as part of the initialization for custom authorizers
(see {@link Declarable#initialize(Cache, Properties)}), when using a declarative approach.

@param cache the {@code Cache} instance that owns this authorizer, required in order to
       configure the security rules used.
geode-core/src/main/java/org/apache/geode/cache/query/security/RestrictedMethodAuthorizer.java