How to write acls for mesos

[????????????]

Hi??I'd like to write MESOS_acls  to control resources??but I don't know how to 
write??
I use mesos + marathon
marathon configuration??
export MARATHON_mesos_user=user_00
export MARATHON_mesos_authentication_principal=tjop_marathon
export 
MARATHON_mesos_authentication_secret_file=$CUR_DIR/../conf/marathon.secret
export MARATHON_mesos_leader_ui_url=http://mesos.webdev.com
export MARATHON_hostname=$hostipaddr
export MARATHON_framework_name=tjop_marathon
export MARATHON_webui_url=http://marathon.webdev.com



mesos configuration??


export MESOS_acls=file://$prefix/etc/mesos/acls
export MESOS_authenticate_agents=true
export MESOS_authenticate_frameworks=true
export MESOS_authorizers=local
export MESOS_authenticate_http_frameworks=true
export MESOS_http_framework_authenticators=basic
export MESOS_authenticators=crammd5
export MESOS_credentials=file://$prefix/etc/mesos/credentials



acls??
{
  "register_frameworks": [
    {
      "principals": { "values": ["tjop_marathon"] },
      "roles": { "values": ["tjop_streammonitors"] }
    }
  ],
  "run_tasks": [
    {
      "principals": { "values": ["tjop_marathon"] },
      "users": { "values": ["user_00","root"] }
    }
  ]
}

credentials:
{
  "credentials": [
    {
      "principal": "tjop_marathon",
      "secret": "tjop_marathon"
    },
{
      "principal": "tjop_mesos_slave",
      "secret": "tjop_mesos_slave"
    }
  ]
}

the marathon is active framework in mesos,but whlile I create app in marahon 
,the app keep in waiting status


please help me,thanks