Metacat

<access authSystem="knb" order="denyFirst" id="accessTest4.1" scope="document">

	<allow>

		<principal>uid=test23,o=NCEAS,dc=ecoinformatics,dc=org</principal>

		<permission>read</permission>

		<permission>write</permission>

	</allow>

</access>