default ACL patterns