1 2 3 4
ALL=welcome:read,logon:logon,logon:logout,logon:status CREATE=password:administrator,password:status READ=password:editme,password:save NONE=roles:read,roles:getlist