<access authSystem="knb" order="allowFirst" id="accessTest1.1" scope="document">
<allow>
<principal>uid=test20,o=NCEAS,dc=ecoinformatics,dc=org</principal>
<permission>read</permission>
</allow>
</access>