how does authorization works in jackrabbit?

[Magnus Grimsell]

I would like to learn more how JackRabbit handles authorization to the 
repository content. Especially when it comes to searching.
I've seen that there is a plugable AccessManager but I'm not sure how this is 
used to filter the search result.
Can somebody point me to some documentation or where in the code to look?