 --
 -- Table structure for table `acl_object_identity`
 --
--- Each table entry is the representation of the object. for which the permissions are given
+-- Each table entry is the representation of the object (in other words - acl_class is class and acl_object_identity is instance of acl_class).
+-- for which the permissions are given
 --
 DROP TABLE IF EXISTS `acl_object_identity`;
 CREATE TABLE `acl_object_identity` (

DROP TABLE IF EXISTS `acl_sid`;
CREATE TABLE `acl_sid` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
  `principal` tinyint(1) NOT NULL,                         -- a label, that shows whether the object is principal(is there a possibility to login with this object or not, i.e. groups cannot be here)
  `sid` varchar(100) NOT NULL,                             -- an entity, which get the permissions()
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_acl_sid` (`sid`,`principal`)

-- Table structure for table `acl_entry`
--
-- Contains the logs of security journal. Each log contains the permissions, that is allowed/not allowed for concrete object
-- Helps to specify what actions can be performed on each of these objects by the desired users
--
DROP TABLE IF EXISTS `acl_entry`;
CREATE TABLE `acl_entry` (
