SLING-8809 ModifyAce request should return a meaningful error message
when an invalid principalId is submitted
diff --git a/src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/post/ModifyAceServlet.java b/src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/post/ModifyAceServlet.java
index deeb03d..f8f19a5 100644
--- a/src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/post/ModifyAceServlet.java
+++ b/src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/post/ModifyAceServlet.java
@@ -266,6 +266,9 @@
 		}
 		PrincipalManager principalManager = AccessControlUtil.getPrincipalManager(jcrSession);
 		Principal principal = principalManager.getPrincipal(principalId);
+		if (principal == null) {
+			throw new RepositoryException("Invalid principalId was submitted.");
+		}
 		
     	if (resourcePath == null) {
 			throw new ResourceNotFoundException("Resource path was not supplied.");