1 2 3 4
ALL=welcome:read,logon:logon,logon:logout,logon:status CREATE=password:status,password:edituser,password:newuser,password:deleteuser READ=password:editme NONE=roles:read,roles:getlist