The actions the user should be allowed to perform. This is a UNIX style permission mask string consisting of three chars "rwx", referring to read, write, and execute permissions respectively. Each of these permissions can be granted by writing the character or not granted by writing a dash - instead. Example: "r--" would grant only read rights while it does not make any changes to the write and execute rights.