To edit the ACL for an object other than a file, specify the
    object class with the /CLASS qualifier. Specify one of the
    following classes:

    CAPABILITY           A system capability, such as the ability to
                         process vector instructions. Currently, the
                         only defined object name for the CAPABILITY
                         class is VECTOR, which governs the ability
                         of a subject to access a vector processor
                         on the system. Note that you must supply
                         the capability name as the object name
                         parameter.
    COMMON_EVENT_        A common event flag cluster.
    CLUSTER
    DEVICE               A device, such as a disk or tape drive.
    FILE                 A file or a directory file. This is the
                         default.
    GROUP_GLOBAL_        A group global section.
    SECTION
    LOGICAL_NAME_TABLE   A logical name table.
    QUEUE                A batch queue or a device (printer, server,
                         or terminal) queue.
    RESOURCE_DOMAIN      A resource domain.
    SECURITY_CLASS       A security class.
    SYSTEM_GLOBAL_       A system global section.
    SECTION
    VOLUME               A disk or tape volume.