* {all {read}} readonly {all {read} admin {write} gnome {write}} admin {}