Default ACLs and Inheritance
If the element is a top-level folder, its default ACL is that specified by a configuration file, not by its parent (the package). If the element is a subfolder, it shares its default ACL settings with other folders at the same level in the folder hierarchy. For details about inheritance, as well as the default ACLs that are installed with the webMethods Integration Server, see webMethods Integration Server Administrator’s Guide.
Note: An element can inherit access from all elements except a package.