I would recomment to store the user form submission under /content/usergenerated & then after validating move to right node. However coming to original question it is possible.
In package creation use filter //element(*,rep:ACL) & set AC Handling to overwrite.
Thie XPath packager is great! One question - if you create (or deploy) the package on Author, how do you replicate that to Publish?
Using the "Replicate" feature, or "Activate" feature in Tools does replicate the package, however permissions will not be deployed on the Publish server
The only way to do it is to manually deploy the package directly to the publish server, and install using the "merge" option.
Is there a better way?
Replicating from author to publish does not work because our replication filters rep:policy. Manualy deploy package is alternative.
Using CUG is Supported way of transfering acl to publish.http://dev.day.com/docs/en/cq/current/howto/create_apply_cug.html