The getEntitlements method checks for parent resources ACLs when the ACL for an specific resource is not found. The isAccessGranted method throws and exception when an ACL can't be found which is inconsistent with the behaviour of the getEntitlements method. This method needs to be fixed to look for parent resources ACLs in this situation.