Problem with disabledPermissions property in ProcessEngineConfiguration

After reading the related documents about disabledPermissions in this link, I tried to use it. but unfortunately the result was not exactly like documents. some permissions are not available after adding to disabledPermissions and some others are available! I have some questions about this and ask them below:

  • which behavior is true?

  • when we add a permission to disabledPermissions, should anyone access to that permission or should no one access that?

I read the code and find that there is two different implementation for checking disabledPermissions. one is here and another is here.

  • why there is two implementation and why they are different?