SetAclPaths on /libs /apps / /content/example.com/some-other_path 
  AclLine REMOVE_ALL {principals=[user1, user2]}
  AclLine ALLOW {principals=[user1, user2], privileges=[jcr:read]}
  AclLine ALLOW {principals=[user4], privileges=[privilege_without_namespace]}
  AclLine DENY {principals=[user2], privileges=[jcr:write, something:else, another:one]}
  AclLine DENY {principals=[user1], privileges=[jcr:lockManagement]}
  AclLine DENY {principals=[user2], privileges=[jcr:modifyProperties]} restrictions=[rep:itemNames=[prop1, prop2]]
SetAclPaths on /no-indentation 
  AclLine ALLOW {principals=[userA, userB], privileges=[jcr:read]}  