SLING-9953: ACEs on/below user nodes are ignored upon conversion (test from test content)
diff --git a/src/test/java/org/apache/sling/feature/cpconverter/handlers/RepPolicyEntryHandlerTest.java b/src/test/java/org/apache/sling/feature/cpconverter/handlers/RepPolicyEntryHandlerTest.java
index 5035749..e2d9889 100644
--- a/src/test/java/org/apache/sling/feature/cpconverter/handlers/RepPolicyEntryHandlerTest.java
+++ b/src/test/java/org/apache/sling/feature/cpconverter/handlers/RepPolicyEntryHandlerTest.java
@@ -227,6 +227,27 @@
     }
 
     @Test
+    public void policyAtAuthorizableFolder() throws Exception {
+        SystemUser s1 = new SystemUser("service1", new RepoPath("/home/users/system/services/random1"), new RepoPath("/home/users/system/services"));
+
+        AclManager aclManager = new DefaultAclManager();
+        aclManager.addSystemUser(s1);
+
+        ParseResult result = parseAndSetRepoInit("/jcr_root/home/groups/g/_rep_policy.xml", aclManager);
+        Extension repoinitExtension = result.getRepoinitExtension();
+        assertNotNull(repoinitExtension);
+        assertEquals(ExtensionType.TEXT, repoinitExtension.getType());
+
+        String expected =
+                "create service user service1 with path /home/users/system/services" + System.lineSeparator() +
+                "set ACL for service1" + System.lineSeparator() +
+                "allow jcr:read,rep:userManagement on /home/groups/g" + System.lineSeparator() +
+                "end" + System.lineSeparator();
+        assertEquals(expected, repoinitExtension.getText());
+        assertTrue(result.excludedAcls.isEmpty());
+    }
+
+    @Test
     public void policyAtGroupNode() throws Exception {
         SystemUser s1 = new SystemUser("service1", new RepoPath("/home/users/system/services/random1"), new RepoPath("/home/users/system/services"));
         Group gr = new Group("testgroup", new RepoPath("/home/groups/g/HjDnfdMCjekaF4jhhUvO"), new RepoPath("/home/groups/g"));
diff --git a/src/test/resources/org/apache/sling/feature/cpconverter/handlers/jcr_root/home/groups/g/_rep_policy.xml b/src/test/resources/org/apache/sling/feature/cpconverter/handlers/jcr_root/home/groups/g/_rep_policy.xml
index db00f39..e912df1 100644
--- a/src/test/resources/org/apache/sling/feature/cpconverter/handlers/jcr_root/home/groups/g/_rep_policy.xml
+++ b/src/test/resources/org/apache/sling/feature/cpconverter/handlers/jcr_root/home/groups/g/_rep_policy.xml
@@ -19,7 +19,7 @@
           jcr:primaryType="rep:ACL">
     <allow
             jcr:primaryType="rep:GrantACE"
-            rep:principalName="service2"
+            rep:principalName="service1"
             rep:privileges="{Name}[jcr:read,rep:userManagement]">
     </allow>
 </jcr:root>