Removes an access control entry (ACE) from the access control set
 (ACS) of a directory and its contents, or from an entire subtree.

 SYNOPSIS

      REMOVE SUBTREE tree-name[...] ACCESS

      principal [EXCLUDE entry-type]

 Arguments

 tree-name

 The name of the topmost directory in the subtree. When used without
 the optional recursion notation, the change applies only to the
 specified directory and and the links and objects in that directory.
 The recursion notation causes the change to additionally apply to
 all child directories and their contents.

 principal

 The principal whose ACE is being removed. Principals can be
 specified as a group name or an individual name in the format
 nodename.user.

 entry-type

 One or more of the following types of entries to exclude from the
 change: objects, links, or directories. Multiple directories can be
 excluded in a single command. Use any combination of the following
 entry-type specifiers, separating multiple arguments with commas:

 objects
 links
 directory directory name

 Description

 This command removes an ACE from the access control set (ACS) of a
 particular directory (and its contents) or from an entire subtree
 of directories. You can use the optional recursion notation (...) to
 modify the ACEs associated with all the child directories (and their
 contents). You can use the optional exclude argument to restrict the
 type of entries affected by this command. You can also use exclude
 with the recursion notation to prevent certain directories from
 being processed.

 ACCESS RIGHTS
 You must have control and write access to the directory you specify
 as well as the contents of the directory. If you use the command
 recursively, you also need control and write access to all child
 directories (and their contents) of the directory you specify.

1  –  example

 The following command removes all ACEs that specify the principal
 .pjl.smith from the .admin directory and all its child directories.

 dns> remove subtree .admin... access .pjl.smith