luci/applications/luci-app-firewall/root/usr/share/rpcd/acl.d/luci-app-firewall.json

{
	"luci-app-firewall": {
		"description": "Grant access to firewall configuration",
		"read": {
			"file": {
				"/etc/firewall.user": [ "read" ]
			},
			"ubus": {
				"file": [ "read" ],
				"luci": [ "getConntrackHelpers" ]
			},
			"uci": [ "firewall" ]
		},
		"write": {
			"file": {
				"/etc/firewall.user": [ "write" ]
			},
			"ubus": {
				"file": [ "write" ]
			},
			"uci": [ "firewall" ]
		}
	}
}