object-spec

    Specifies the object whose access control list is to be created
    or edited. If an access control list does not exist, it is
    created.

    You can specify an object from any of the following object
    classes:

       Capability
       Common event flag cluster
       Device
       File
       Group global section
       Logical name table
       Queue
       Resource domain
       Security class
       System global section
       Volume

    The default object class is a file. A file must be a disk file
    on a Files-11 On-Disk Structure Level 2 formatted volume. For any
    object other than a file, you must specify the object class with
    the /CLASS qualifier.

    Note that the ACL editor does not provide a default file type
    for files. To prevent the ACL editor from using a null file type,
    specify the file type on the command line. If the object is a
    directory, specify the .DIR file type.

    Do not include wildcard characters in the object specification.