Invalid value for access:restriction: foo
foo
The specified attribute value is not a valid access:restriction.
Change the attribute value to either allow or deny.
allow
deny