There are two ways to manipulate ACLs: either through the acl_edit command (see the acl_edit(8sec) reference page) or through the DCE ACL application interface (see the sec_acl_*(3sec) reference pages).
