PermissionManager has two revokePermission() methods: one that takes a resource object, and another that takes a resource class. It looks like the latter is supposed to also take a resource identifier, but it currently does not, and so the implementation of it is broken. It forwards to the same PermissionStore method as the other revokePermission(), passing the resource class as the resource object. There is also a listPermission() variant with the same behavior.

Also, grantPermission() and clearPermissions() only have variants that take resource objects. It would be convenient if they also had variants that took a resource class and identifier instead.