@Override
 public void checkCanSetUser(Principal principal, String userName) {
   if (shouldDenyPrivilege(userName, userName, SET_USER)) {
     denySetUser(principal, userName);
   }
   if (denyPrivileges.isEmpty()) {
     super.checkCanSetUser(principal, userName);
   }
 }