pub fn acl_item_privileges<'a>(acl_item: AclItem) -> String