ACL: access to all values vs. to value