setfacl_file_list

# NO will change the action, '-m' to '-x'
# ALL implies all users/groups
# RESTRICT USER/GROUP and EXCLUDE USER/GROUP can be used once within one ACL block
# One ACL block = NO/RESTRICT...END
# In other words,ACL blocks must start with NO or RESTRICT and ends with END
# RESTRICT,PERM and END must be present, NO and EXCLUDE are optional.
# PERM specifies the default permission for a single segment
# However, you can also specify it individually, like shown below (line 16)
# The script will ignore comments, empty lines or lines filled with spaces

RESTRICT USER ALL   # The script will ignore inline comments as well, like this one
RESTRICT GROUP group2
EXCLUDE USER user1
PERM rwx

file1 ---       # At here, --- replaces rwx, so file1 has permission of ---
file2

END

NO          # Since this ACL block starts with NO, the generated operation
RESTRICT USER user2 # will be "setfacl -x ..." instead of "setfacl -m ..."
RESTRICT GROUP group1
PERM 5          # You can also use number instead of string to specify permission

file3
END