ADMIN:*    {admin {read write} trusted {} all {}} 
TEMPLATE:* {admin {read write} trusted {read} all {}} 
*          {admin {read write} trusted {read write} all {read}}