Every directory and object in the dictionary can have an access
       control list. An ACL generally consists of one or more ACL
       entries, although an ACL can be empty. Each entry in an access
       control list performs two functions:

       o  It identifies individual users or classes of users to whom the
          ACL entry applies.

       o  It specifies the access privileges of the user or class of
          users to whom the entry applies.

       An entry in the ACL of a dictionary object or directory has two
       parts:

       o  The user identification criteria

          See the subtopic Identification for more information.

       o  The privilege specification

          See the subtopic Specification for more information.

       For a list of access privileges, see the subtopic Access_
       Privileges.

       The DEFINEP command creates an ACL entry. The DELETEP command
       removes an ACL entry. The SHOWP command displays an ACL entry.
       The SHOW PRIVILEGE command displays your access privileges to
       a directory/dictionary or object. For more information, see the
       help for these commands.