Using Shiro

[james agada]

Forgive me if this has been asked before.
shiro.ini allows one to configure permissions on an object. How does isis
use these configurations? Are they automatically applied? Is there an API
or a service that we call? If a user does not have read permission on an
object or write permission on an object, what happens?