An ACL file defines the permission of the participants in the business network, for example:

rule OwnerHasFullAccessToTheirAssets {
    description: "Allow all participants full access to their assets"
    participant(p): "org.example.basic.SampleParticipant"
    operation: ALL
    resource(r): "org.example.basic.SampleAsset"
    condition: (r.owner.getIdentifier() === p.getIdentifier())
    action: ALLOW
}

In the preceding ACL example, it specifies that the participant is SampleParticipant. Any instance registered as SampleParticipant can perform ALL operations on all instances of org.example.SampleAsset. This transaction is triggered when the SampleAsset owner is the same as the participant who submitted a transaction.