Background Job (Scheduler or Event-Driven):Periodically or upon ACL/user changes, calculates which URIs each user (or group) can access.Stores this permission map under "/conf/myapp/permissions/<userId>" as JCR nodes/properties.AuthChecker Servlet:On HEAD requests (from Dispatcher), reads the user’s...