try {
String queryString = "select [jcr:path] from [nt:unstructured] as node where ISCHILDNODE(node, '/parent')";
assertNodesAreFound(queryString, Query.JCR_SQL2, "/parent/child1", "/parent/child2");
// remove the READ permission for child1
acl.addAccessControlEntry(SimplePrincipal.EVERYONE,
new Privilege[] {acm.privilegeFromName(Privilege.JCR_WRITE),
acm.privilegeFromName(Privilege.JCR_REMOVE_NODE),
acm.privilegeFromName(Privilege.JCR_MODIFY_ACCESS_CONTROL)});
acm.setPolicy("/parent/child1", acl);
session.save();