| RemoveAclPaths on /libs /apps / /content/example.com/some-other_path |
| AclLine ALLOW {principals=[user1, user2], privileges=[jcr:read]} |
| AclLine ALLOW {principals=[user4], privileges=[privilege_without_namespace]} |
| AclLine DENY {principals=[user2], privileges=[jcr:write, something:else, another:one]} |
| AclLine DENY {principals=[user1], privileges=[jcr:lockManagement]} |
| AclLine DENY {principals=[user2], privileges=[jcr:modifyProperties]} restrictions=[rep:itemNames=[prop1, prop2]] |
| RemoveAclPrincipals for user1 u2 |
| AclLine ALLOW {paths=[/content], privileges=[jcr:read]} |
| AclLine ALLOW {paths=[/content], privileges=[jcr:addChildNodes, jcr:modifyProperties]} restrictions=[rep:glob=[]] |
| AclLine DENY {paths=[/etc, /var], privileges=[jcr:read]} restrictions=[rep:ntNames=[sling:Folder, nt:unstructured], rep:itemNames=[prop1, prop2]] |
| RemoveAclPrincipalBased for principal1 principal2 |
| AclLine ALLOW {paths=[/content], privileges=[jcr:read]} |
| AclLine DENY {paths=[/apps, /content], privileges=[jcr:modifyProperties]} restrictions=[rep:itemNames=[prop1, prop2]] |
| AclLine ALLOW {paths=[/apps], privileges=[jcr:addChildNodes]} restrictions=[rep:ntNames=[sling:Folder, nt:unstructured]] |
| AclLine ALLOW {paths=[/apps], privileges=[jcr:modifyProperties]} restrictions=[rep:ntNames=[sling:Folder, nt:unstructured], rep:itemNames=[prop1, prop2]] |
| AclLine ALLOW {paths=[/apps, /content], privileges=[jcr:addChildNodes]} restrictions=[rep:glob=[/cat, /cat/, cat]] |
| AclLine ALLOW {paths=[/apps, /content], privileges=[jcr:addChildNodes]} restrictions=[rep:glob=[cat/, *, *cat]] |
| AclLine ALLOW {paths=[/apps, /content], privileges=[jcr:addChildNodes]} restrictions=[rep:glob=[/cat/*, */cat, *cat/*]] |
| AclLine ALLOW {paths=[/], privileges=[jcr:something]} restrictions=[rep:glob=[]] |
| AclLine ALLOW {paths=[:repository, :home:alice#], privileges=[jcr:all]} |
