<?xml version="1.0" encoding="utf-8"?>
<acl>
  <ace order="deny,allow">
    <action>
      <deny>
        <users>?</users>
      </deny>
      <allow>
        <users>*</users>
      </allow>
    </action>
  </ace>
  <ace resource="_superadmin" order="allow,deny">
    <action>
      <allow>
        <roles>superadmin</roles>
      </allow>
      <deny>
        <users>*</users>
      </deny>
    </action>
    <action name="*">
      <allow>
        <roles>superadmin</roles>
      </allow>
      <deny>
        <users>*</users>
      </deny>
    </action>
  </ace>
</acl>
