enabledActions=["org.apache.jackrabbit.oak.spi.security.user.action.AccessControlAction"] userPrivilegeNames=["jcr:all"] groupPrivilegeNames=["jcr:read"]