question: @ PUT @ Path ( "/{id}/acl" ) @ Consumes ( { MediaType . APPLICATION_XML , MediaType . APPLICATION_JSON } ) @ CheckPermission ( roles = { Role . SECURITY_ADMIN , Role . SYSTEM_ADMIN , Role . RESTRICTED_SYSTEM_ADMIN } , blockProxies = true ) public ACLAssignments updateAcls ( @ PathParam ( "id" ) URI id , ACLAssignmentChanges changes ) { VirtualArray varray = getVirtualArrayById ( id , true ) ; _permissionsHelper . updateACLs ( varray , changes , new PermissionsHelper . UsageACLFilter ( _permissionsHelper ) ) ; _dbClient . persistObject ( varray ) ; auditOp ( OperationTypeEnum . MODIFY_VARRAY_ACL , true , null , id . toString ( ) , varray . getLabel ( ) ) ; return getAclsResponse ( id ) ; }
target:  Add or remove individual ACL entry(s). Request body must include at least one add or remove operation