<acl>
   <group name="Everyone">
      <acl name="Default"/>
      <object name="user.*"/>
      <object name="resource.*"/>
   </group>
   <group name="Moderator">
      <acl name="Moderator"/>
      <object name="resource.mapcycler"/>
      <object name="resource.mapmanager"/>
      <object name="resource.resourcemanager"/>
      <object name="resource.votemanager"/>
   </group>
   <group name="SuperModerator">
      <acl name="Moderator"/>
      <acl name="SuperModerator"/>
   </group>
   <group name="Admin">
      <acl name="Moderator"/>
      <acl name="SuperModerator"/>
      <acl name="Admin"/>
      <acl name="RPC"/>
      <object name="resource.admin"/>
      <object name="resource.webadmin"/>
      <object name="resource.acpanel"/>
   </group>
   <group name="Console">
      <acl name="Moderator"/>
      <acl name="SuperModerator"/>
      <acl name="Admin"/>
      <acl name="RPC"/>
      <object name="user.Console"/>
   </group>
   <group name="RPC">
      <acl name="RPC"/>
   </group>
   <group name="MapEditor">
      <acl name="Default"/>
      <acl name="MapEditor"/>
      <object name="resource.editor_main"/>
      <object name="resource.edf"/>
   </group>
   <group name="raceACLGroup">
      <acl name="Default"/>
      <acl name="raceACL"/>
      <object name="resource.race"/>
   </group>
   <group name="DevGroup">
      <acl name="DevACL"/>
   </group>
   <acl name="Default">
      <right name="general.ModifyOtherObjects" access="false"/>
      <right name="general.http" access="false"/>
      <right name="command.start" access="false"/>
      <right name="command.stop" access="false"/>
      <right name="command.stopall" access="false"/>
      <right name="command.gamemode" access="false"/>
      <right name="command.changemode" access="false"/>
      <right name="command.changemap" access="false"/>
      <right name="command.stopmode" access="false"/>
      <right name="command.stopmap" access="false"/>
      <right name="command.skipmap" access="false"/>
      <right name="command.restart" access="false"/>
      <right name="command.refresh" access="false"/>
      <right name="command.refreshall" access="false"/>
      <right name="command.addaccount" access="false"/>
      <right name="command.delaccount" access="false"/>
      <right name="command.debugscript" access="false"/>
      <right name="command.chgpass" access="false"/>
      <right name="command.loadmodule" access="false"/>
      <right name="command.unloadmodule" access="false" />
      <right name="command.reloadmodule" access="false" />
      <right name="command.upgrade" access="false"/>
      <right name="command.mute" access="false"/>
      <right name="command.crun" access="false"/>
      <right name="command.srun" access="false"/>
      <right name="command.run" access="false"/>
      <right name="command.unmute" access="false"/>
      <right name="command.kick" access="false"/>
      <right name="command.ban" access="false"/>
      <right name="command.banip" access="false"/>
      <right name="command.unbanip" access="false"/>
      <right name="command.reloadbans" access="false"/>
      <right name="command.shutdown" access="false"/>
      <right name="command.install" access="false"/>
      <right name="command.aexec" access="false"/>
      <right name="command.whois" access="false"/>
      <right name="command.whowas" access="false"/>
      <right name="command.aclrequest" access="false" />
      <right name="command.authserial" access="false" />
      <right name="function.executeCommandHandler" access="false"/>
      <right name="function.setPlayerMuted" access="false"/>
      <right name="function.addAccount" access="false"/>
      <right name="function.addBan" access="false"/>
      <right name="function.setUnbanTime" access="false"/>
      <right name="function.setBanAdmin" access="false"/>
      <right name="function.setBanReason" access="false"/>
      <right name="function.setBanNick" access="false"/>
      <right name="function.removeBan" access="false"/>
      <right name="function.removeAccount" access="false"/>
      <right name="function.setAccountPassword" access="false"/>
      <right name="function.kickPlayer" access="false"/>
      <right name="function.banIP" access="false"/>
      <right name="function.banPlayer" access="false"/>
      <right name="function.banSerial" access="false"/>
      <right name="function.getBansXML" access="false"/>
      <right name="function.unbanIP" access="false"/>
      <right name="function.unbanSerial" access="false"/>
      <right name="function.reloadBans" access="false"/>
      <right name="function.setServerPassword" access="false"/>
      <right name="function.getServerPassword" access="false"/>
      <right name="function.callRemote" access="false"/>
      <right name="function.fetchRemote" access="false"/>
      <right name="function.startResource" access="false"/>
      <right name="function.stopResource" access="false"/>
      <right name="function.restartResource" access="false"/>
      <right name="function.createResource" access="false"/>
      <right name="function.copyResource" access="false"/>
      <right name="function.addResourceMap" access="false"/>
      <right name="function.addResourceConfig" access="false"/>
      <right name="function.removeResourceFile" access="false"/>
      <right name="function.setResourceDefaultSetting" access="false"/>
      <right name="function.removeResourceDefaultSetting" access="false"/>
      <right name="function.redirectPlayer" access="false"/>
      <right name="function.aclReload" access="false"/>
      <right name="function.aclSave" access="false"/>
      <right name="function.aclCreate" access="false"/>
      <right name="function.aclDestroy" access="false"/>
      <right name="function.aclSetRight" access="false"/>
      <right name="function.aclRemoveRight" access="false"/>
      <right name="function.aclCreateGroup" access="false"/>
      <right name="function.aclDestroyGroup" access="false"/>
      <right name="function.aclGroupAddACL" access="false"/>
      <right name="function.aclGroupRemoveACL" access="false"/>
      <right name="function.aclGroupAddObject" access="false"/>
      <right name="function.aclGroupRemoveObject" access="false"/>
      <right name="function.refreshResources" access="false"/>
      <right name="function.setServerConfigSetting" access="false" />
      <right name="function.updateResourceACLRequest" access="false" />
      <right name="function.shutdown" access="false" />
   </acl>
   <acl name="Moderator">
      <right name="general.ModifyOtherObjects" access="false"/>
      <right name="command.gamemode" access="true"/>
      <right name="command.changemode" access="true"/>
      <right name="command.changemap" access="true"/>
      <right name="command.stopmode" access="true"/>
      <right name="command.stopmap" access="true"/>
      <right name="command.skipmap" access="true"/>
      <right name="command.mute" access="true"/>
      <right name="command.unmute" access="true"/>
      <right name="command.whois" access="true"/>
      <right name="command.whowas" access="true"/>
      <right name="function.setPlayerMuted" access="true"/>
      <right name="function.kickPlayer" access="true"/>
      <right name="function.banIP" access="true"/>
      <right name="function.banPlayer" access="true"/>
      <right name="function.banSerial" access="true"/>
      <right name="function.getBansXML" access="true"/>
      <right name="function.unbanIP" access="true"/>
      <right name="function.unbanSerial" access="true"/>
      <right name="function.startResource" access="true"/>
      <right name="function.stopResource" access="true"/>
      <right name="function.restartResource" access="true"/>
      <right name="function.redirectPlayer" access="true"/>
   </acl>
   <acl name="SuperModerator">
      <right name="general.ModifyOtherObjects" access="false"/>
      <right name="command.start" access="true"/>
      <right name="command.stop" access="true"/>
      <right name="command.restart" access="true"/>
      <right name="command.kick" access="true"/>
      <right name="command.ban" access="true"/>
      <right name="command.banip" access="true"/>
      <right name="command.unbanip" access="true"/>
      <right name="command.reloadbans" access="true"/>
      <right name="command.refresh" access="true"/>
      <right name="command.refreshall" access="true"/>
      <right name="command.loadmodule" access="true"/>
      <right name="command.unloadmodule" access="true" />
      <right name="command.reloadmodule" access="true" />
      <right name="command.addaccount" access="true"/>
      <right name="command.delaccount" access="true"/>
      <right name="command.chgpass" access="true"/>
      <right name="function.addAccount" access="true"/>
      <right name="function.removeAccount" access="true"/>
      <right name="function.setAccountPassword" access="true"/>
   </acl>
   <acl name="Admin">
      <right name="general.ModifyOtherObjects" access="true"/>
      <right name="general.http" access="true"/>
      <right name="command.shutdown" access="true"/>
      <right name="command.install" access="true"/>
      <right name="command.aexec" access="true"/>
      <right name="command.debugscript" access="true"/>
      <right name="command.upgrade" access="true"/>
      <right name="command.crun" access="true"/>
      <right name="command.srun" access="true"/>
      <right name="command.run" access="true"/>
      <right name="command.aclrequest" access="true" />
      <right name="command.authserial" access="true" />
      <right name="function.addBan" access="true"/>
      <right name="function.setUnbanTime" access="true"/>
      <right name="function.setBanAdmin" access="true"/>
      <right name="function.setBanReason" access="true"/>
      <right name="function.setBanNick" access="true"/>
      <right name="function.removeBan" access="true"/>
      <right name="function.reloadBans" access="true"/>
      <right name="function.executeCommandHandler" access="true"/>
      <right name="function.setServerPassword" access="true"/>
      <right name="function.getServerPassword" access="true"/>
      <right name="function.createResource" access="true"/>
      <right name="function.copyResource" access="true"/>
      <right name="function.addResourceMap" access="true"/>
      <right name="function.addResourceConfig" access="true"/>
      <right name="function.removeResourceFile" access="true"/>
      <right name="function.setResourceDefaultSetting" access="true"/>
      <right name="function.removeResourceDefaultSetting" access="true"/>
      <right name="function.aclReload" access="true"/>
      <right name="function.aclSave" access="true"/>
      <right name="function.aclCreate" access="true"/>
      <right name="function.aclDestroy" access="true"/>
      <right name="function.aclSetRight" access="true"/>
      <right name="function.aclRemoveRight" access="true"/>
      <right name="function.aclCreateGroup" access="true"/>
      <right name="function.aclDestroyGroup" access="true"/>
      <right name="function.aclGroupAddACL" access="true"/>
      <right name="function.aclGroupRemoveACL" access="true"/>
      <right name="function.aclGroupAddObject" access="true"/>
      <right name="function.aclGroupRemoveObject" access="true"/>
      <right name="function.refreshResources" access="true"/>
      <right name="function.setServerConfigSetting" access="true" />
      <right name="function.updateResourceACLRequest" access="true" />
      <right name="function.shutdown" access="true" />
   </acl>
   <acl name="RPC">
      <right name="function.callRemote" access="true"/>
      <right name="function.fetchRemote" access="true"/>
   </acl>
   <acl name="MapEditor">
      <right name="general.ModifyOtherObjects" access="true"/>
      <right name="function.startResource" access="true"/>
      <right name="function.stopResource" access="true"/>
      <right name="function.restartResource" access="true"/>
      <right name="function.createResource" access="true"/>
      <right name="function.copyResource" access="true"/>
      <right name="function.renameResource" access="true"/>
      <right name="function.deleteResource" access="true"/>
      <right name="function.addResourceMap" access="true"/>
      <right name="function.addResourceConfig" access="true"/>
      <right name="function.removeResourceFile" access="true"/>
      <right name="function.setResourceDefaultSetting" access="true"/>
      <right name="function.removeResourceDefaultSetting" access="true"/>
      <right name="function.xmlLoadFile" access="true"/>
      <right name="function.refreshResources" access="true" />
   </acl>
   <acl name="raceACL">
      <right name="general.ModifyOtherObjects" access="true"/>
      <right name="function.xmlLoadFile" access="true"/>
      <right name="function.startResource" access="true"/>
      <right name="function.stopResource" access="true"/>
      <right name="function.restartResource" access="true"/>
    </acl>
   <acl name="DevACL">
        <right name="resource.performancebrowser.http" access="true"></right>
        <right name="resource.ajax.http" access="true"></right>
   </acl>
</acl>