# Mixing paths and repo-level ACL
set ACL on /content,:repository
    allow jcr:all for user1
end