@Override
    public PrivacyList getDefaultList() {
        if (defaultList != null) {
            try {
                return PrivacyListManager.getInstance().getPrivacyList(getUsername(), defaultList);
            } catch (UserNotFoundException e) {
                Log.error(e.getMessage(), e);
            }
        }
        return null;
    }
Returns the default Privacy list used for the session's user. This list is
processed if there is no active list set for the session.

@return the default Privacy list used for the session's user.
xmppserver/src/main/java/org/jivesoftware/openfire/session/LocalClientSession.java