The following is an example of access control for an external user:

# List of mappings between paths and AccessController objects. If a
# path refers to a directory, all the documents in that directory and
# its subdirectories will be protected by the given AccessController.
accessControllers+=\
    /rest/model/atg/userprofiling/ProfileActor/logout=
        /atg/rest/userprofiling/LoggedInAccessController, \
    /rest/model/atg/userprofiling/ProfileActor/logout-success=
        /atg/rest/userprofiling/AllAccessController, \
    /rest/model/atg/userprofiling/ProfileActor/logout-error=
        /atg/rest/userprofiling/AllAccessController, \
    /rest/model/atg/rest/SessionConfirmationActor/getSessionConfirmationNumber=
        /atg/rest/userprofiling/AllAccessController