RemoveAclPaths on /libs /apps / /content/example.com/some-other_path 
  AclLine ALLOW {principals=[user1, user2], privileges=[jcr:read]}
  AclLine ALLOW {principals=[user4], privileges=[privilege_without_namespace]}
  AclLine DENY {principals=[user2], privileges=[jcr:write, something:else, another:one]}
  AclLine DENY {principals=[user1], privileges=[jcr:lockManagement]}
  AclLine DENY {principals=[user2], privileges=[jcr:modifyProperties]} restrictions=[rep:itemNames=[prop1, prop2]]
RemoveAclPrincipals for user1 u2 
  AclLine ALLOW {paths=[/content], privileges=[jcr:read]}
  AclLine ALLOW {paths=[/content], privileges=[jcr:addChildNodes, jcr:modifyProperties]} restrictions=[rep:glob=[]]
  AclLine DENY {paths=[/etc, /var], privileges=[jcr:read]} restrictions=[rep:ntNames=[sling:Folder, nt:unstructured], rep:itemNames=[prop1, prop2]]
RemoveAclPrincipalBased for principal1 principal2 
  AclLine ALLOW {paths=[/content], privileges=[jcr:read]}
  AclLine DENY {paths=[/apps, /content], privileges=[jcr:modifyProperties]} restrictions=[rep:itemNames=[prop1, prop2]]
  AclLine ALLOW {paths=[/apps], privileges=[jcr:addChildNodes]} restrictions=[rep:ntNames=[sling:Folder, nt:unstructured]]
  AclLine ALLOW {paths=[/apps], privileges=[jcr:modifyProperties]} restrictions=[rep:ntNames=[sling:Folder, nt:unstructured], rep:itemNames=[prop1, prop2]]
  AclLine ALLOW {paths=[/apps, /content], privileges=[jcr:addChildNodes]} restrictions=[rep:glob=[/cat, /cat/, cat]]
  AclLine ALLOW {paths=[/apps, /content], privileges=[jcr:addChildNodes]} restrictions=[rep:glob=[cat/, *, *cat]]
  AclLine ALLOW {paths=[/apps, /content], privileges=[jcr:addChildNodes]} restrictions=[rep:glob=[/cat/*, */cat, *cat/*]]
  AclLine ALLOW {paths=[/], privileges=[jcr:something]} restrictions=[rep:glob=[]]
  AclLine ALLOW {paths=[:repository, :home:alice#], privileges=[jcr:all]}