yes, the method will go up the node hierarchy looking for authz:assignment properties, eventually it will hit root, find no authz:assigment, cause a PathNotFoundException and return with the empty DEFAULT_ACCESS_ROLES