Non-ACL authorization
If ACL authorization is not enabled, the identities and
protection modes that are defined by the operating system are administered
directly.
ACLs can protect the following object types: VOB object, policy, rolemap, and element.