@Override
    public PrivacyList getActiveList() {
        if (activeList != null) {
            try {
                return PrivacyListManager.getInstance().getPrivacyList(getUsername(), activeList);
            } catch (UserNotFoundException e) {
                Log.error(e.getMessage(), e);
            }
        }
        return null;
    }
Returns the Privacy list that overrides the default privacy list. This list affects
only this session and only for the duration of the session.

@return the Privacy list that overrides the default privacy list.
xmppserver/src/main/java/org/jivesoftware/openfire/session/LocalClientSession.java