<!ELEMENT users (user)*>            <!-- root of document -->
<!ELEMENT user (rights)*>
<!ATTLIST user
    name CDATA #REQUIRED>           <!-- name of user -->
<!ELEMENT rights (read|check-in-out|add-rename|destroy)*>
<!ATTLIST rights
    project CDATA #REQUIRED>        <!-- name of project where rights apply -->

<!-- following are elements for possible rights --> 
<!ELEMENT read EMPTY>
<!ELEMENT check-in-out EMPTY>
<!ELEMENT add-rename EMPTY>
<!ELEMENT destroy EMPTY>