Example: folder:folderid#shown_in_any_module@module:xy folder:anotherfolderid#shown_in_any_module@module:xy module:xy#has_licence_for_module_a@user:alice module:xy#has_licence_for_module_b@user:bob So the point is: The module id will always be "xy" and the actual permission will be defined by "has_licence_for_module_a" and so on.