How to made rule settings in ACFS security work like what we need ?

/acfs3 is an ACFS in RAC environment.
I want user root and oracle to have different access privilege on /acfs3/dirb:
1、user root has all privilege on /acfs3/dirb
2、user oracle has only read permission on /acfs3/dirb from 8:00 to 23:00

So i made the following rule settings and add them to a realm:
--create rule and ruleset
acfsutil sec rule create rule_read_oracle -m /acfs3 -t username oracle -o ALLOW
acfsutil sec rule create rule_time_oracle -m /acfs3 -t time 08:00:00,23:00:00 -o ALLOW
acfsutil sec ruleset create rule_set_oracle1 -m /acfs3
acfsutil sec ruleset edit rule_set_oracle1 -m /acfs3 -a rule_read_oracle,rule_time_oracle -o ALL_TRUE