Like described in http://docs.geoserver.org/stable/en/user/rest/api/accesscontrol.html it should be possible to delete a certain access rule with a command like:
http://localhost:8080/geoserver/rest/security/acl/rest/%2F**%2Fworkspaces%2Ftest%2F**;GET but I do get a 404 Not found. The rule is in the /security/rest.properties file, e.g. /**/workspaces/test/**;GET=test
To fetch all the rules with http://localhost:8080/geoserver/rest/security/acl/rest.json works fine.
How is the correct way to define the url to delete a rest-acces rule?