<access authSystem="knb" order="allowFirst" id="accessTest7.1" scope="document"> <allow> <principal>uid=test28,o=NCEAS,dc=ecoinformatics,dc=org</principal> <principal>uid=test29,o=NCEAS,dc=ecoinformatics,dc=org</principal> <permission>read</permission> </allow> </access>