default rule is trapwrite for everything

iocBoot/accessSecurity.acf

-HAG(workstation) {mooneylinux.aps.anl.gov}
-UAG(user) {mooney}
+#HAG(workstation) {mooneylinux.aps.anl.gov}
+#UAG(user) {mooney}
+#ASG(DEFAULT) {
+#	RULE(1,READ)
+#	RULE(1,WRITE,TRAPWRITE) {
+#		HAG(workstation)
+#		UAG(user)
+#	}
+#	RULE(1,WRITE)
+#}
 ASG(DEFAULT) {
-	RULE(1,READ)
-	RULE(1,WRITE,TRAPWRITE) {
-		HAG(workstation)
-		UAG(user)
-	}
-	RULE(1,WRITE)
+	RULE(1,WRITE,TRAPWRITE)
 }