If no data access control configuration is uploaded, and the property file has dac.default-access-control=true a default access control file will be used. The default access control file will allow access to local users, deny access to other users, and allow some access to users with the role ROLE_linked, which will be granted by the HUB to users that have successfully traced a graph to a traceable object.
The default configuration may be changed by setting the dac.default-access-file to another file or classpath reference.
Uploading a data access control file will supersede any default access control. Uploading an empty file with no <Grant> elements clears data access control allowing the default to be used.
To operate without any access control at all, the dac.default-access-control must be set to false.
