SetAclPrincipals for user1 
  AclLine ALLOW {paths=[:repository, /content], privileges=[jcr:all]}
