ADMIN:*    {admin {read write} trusted {read} all {read}} 
TEMPLATE:* {admin {read write} trusted {read} all {read}} 
*          {admin {read write} trusted {read write} all {read}}