/capability cmInitCanUseRepositories canUseRepository CAMID(": ") setPolicy grant traverse grant CAMID("::Everyone") traverse grant execute grant update true /capability/securedFunction[@name=" "] cmInitCanUpdateRepositoryRules canUpdateRepositoryRules CAMID(": ") setPolicy grant traverse grant cmInitCanViewContentInRepository canViewContentInRepository update true