Privilege[] readPriv = privilegesFromName(Privilege.JCR_READ);
Privilege[] writePriv = privilegesFromName(Privilege.JCR_WRITE);
Principal principal2 = pMgr.getEveryone();
pt.addEntry(testPrincipal, readPriv, true, restrictions);
pt.addEntry(principal2, readPriv, true, restrictions);
pt.addEntry(testPrincipal, writePriv, false, restrictions);
pt.addEntry(principal2, writePriv, true, restrictions);
// entry complementary to the first entry
// -> must remove the allow-READ entry and update the deny-WRITE entry.
pt.addEntry(testPrincipal, readPriv, false, restrictions);