SetAclPaths on /content :repository 
  AclLine ALLOW {principals=[user1], privileges=[jcr:all]}