+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| PATH                          | PRIVILEGES               | RESTRINCTION            | NOTE                                                           |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /                             | ALLOW jcr:read           | rep:glob=""             | Read permission to root node only                              |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /content                      | ALLOW jcr:read           | rep:glob=""             | Read permission to content node only                           |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /content                      | ALLOW rep:readProperties |                         | Read permission to node properties (needed for CRX navigation) |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /content                      | ALLOW jcr:read           | rep:glob=/*/jcr:content | Read permission to see jcr:content node (for page properties)  |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /content/projectA             | ALLOW jcr:read           | rep:glob=""             | Read permission to projectA node only                          |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /content/projectA/EN          | ALLOW jcr:read           | rep:glob=""             | Read permission to EN node only                                |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+
| /content/projectA/EN/SUBHOME2 | ALLOW jcr:all            |                         | Full access to node section                                    |
+-------------------------------+--------------------------+-------------------------+----------------------------------------------------------------+