#account, allow/deny, right1|right2, scope, path
admin, deny, WriteMetadata|Delete, All, \test\folder
admin, allow, Browse|Read, All, \test\folder