@Override
    public boolean hasPermission(ModeledAuthenticatedUser user,
            ModeledPermissions<? extends EntityModel> targetEntity,
            ObjectPermission.Type type, String identifier,
            Set<String> effectiveGroups) throws GuacamoleException {

        // Retrieve permissions
        Set<ObjectPermission> permissions = retrievePermissions(user,
                targetEntity, effectiveGroups);

        // Permission is granted if retrieved permissions contains the
        // requested permission
        ObjectPermission permission = new ObjectPermission(type, identifier); 
        return permissions.contains(permission);

    }
Provider for active connection permission sets.
extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/src/main/java/org/apache/guacamole/auth/jdbc/activeconnection/ActiveConnectionPermissionService.java