code: @ACL
     @Path("/{repoName}/{repoPath:.*}/")
     public Response acl(@PathParam("repoName") String repoName, @PathParam("repoPath") String repoPath,
        @HeaderParam(ExtHttpHeaders.LOCKTOKEN) String lockTokenHeader, @HeaderParam(ExtHttpHeaders.IF) String ifHeader,
        HierarchicalProperty body)
     {
        if (log.isDebugEnabled())
        {
           log.debug("ACL " + repoName + "/" + repoPath);
        }
  
        repoPath = normalizePath(repoPath);
  
        try
        {
           List<String> lockTokens = lockTokens(lockTokenHeader, ifHeader);
           Session session = session(repoName, workspaceName(repoPath), lockTokens);
           return new AclCommand().acl(session, path(repoPath), body);
        }
  
        catch (NoSuchWorkspaceException exc)
        {
           log.error("NoSuchWorkspace. " + exc.getMessage());
           return Response.status(HTTPStatus.NOT_FOUND).entity(exc.getMessage()).build();
        }
        catch (Exception exc)
        {
           log.error(exc.getMessage(), exc);
           return Response.status(HTTPStatus.INTERNAL_ERROR).entity(exc.getMessage()).build();
        }
     }
docs: WebDAV ACL method according to protocol extension - Access Control Protocol: RFC3744
  More details here: <a href='http://www.webdav.org/specs/rfc3744.html'>Web Distributed
  Authoring and Versioning (WebDAV) Access Control Protocol</a>
  @param repoName repository name
  @param repoPath path in repository
  @param lockTokenHeader Lock-Token HTTP header
  @param ifHeader If- HTTP Header
  @param body Request body
  @return the instance of javax.ws.rs.core.Response
  @LevelAPI Provisional