Tool to export and import ACL from Policy Administrator

The query below can be executed from within Oracle SQL Developer and can be exported to excel from there.  Then you can generate a load file to remove and add the existing ACLs.  However you need to program your own "remove" command because there is NOT one available OOTB.  This is what I have used to modify all ACLs in all of our existing containers (1200+).

SELECT --A2.namecontainerInfo Context,
--A1.name ParentDomain,
A4.name ChildDomain,
case when instr(A0.classnamea5, '|') != 0 then
    'WCTYPE|' ||
    (select wttdm.inthid
      from wttypedefinitionmaster wttdm,
        controlbranch cb
      where cb.ida2a2 = substr(A0.classnamea5, instr(A0.classnamea5, '|')+1)
      and cb.ida3b5 = wttdm.ida2a2)
  else
    A0.classnamea5
  end as ClassName,
DECODE(A3.permissionType,'0','+','1','-','2','!','?') PermissionType,
A5.name Principal,
case
  when A3.permissionMask = '-1' then
    '-1'
  else
    regexp_replace(
    DECODE(BITAND(A3.permissionMask,'1'),'1','0/') ||
    DECODE(BITAND(A3.permissionMask,'1024'),'1024','10/')  ||
    DECODE(BITAND(A3.permissionMask,'2'),'2','1/')  ||
    DECODE(BITAND(A3.permissionMask,'2048'),'2048','11/')  ||
    DECODE(BITAND(A3.permissionMask,'65536'),'65536','16/')  ||
    DECODE(BITAND(A3.permissionMask,'8192'),'8192','13/')  ||
    DECODE(BITAND(A3.permissionMask,'4'),'4','2/')  ||
    DECODE(BITAND(A3.permissionMask,'32768'),'32768','15/')  ||
    DECODE(BITAND(A3.permissionMask,'128'),'128','7/')  ||
    DECODE(BITAND(A3.permissionMask,'256'),'256','8/')  ||
    DECODE(BITAND(A3.permissionMask,'4096'),'4096','12/')  ||
    DECODE(BITAND(A3.permissionMask,'16384'),'16384','14/')  ||
    DECODE(BITAND(A3.permissionMask,'512'),'512','9/')  ||
    DECODE(BITAND(A3.permissionMask,'32'),'32','5/')  ||
    DECODE(BITAND(A3.permissionMask,'64'),'64','6/'), '/$')
end Permissions,
A0.stateNameA5 State,
DECODE(A3.allExceptPrincipal,'0','FALSE','TRUE') AllExceptPrincipal,
DECODE(A3.permissionMask,'-1','1') FullControl_1,
DECODE(BITAND(A3.permissionMask,'1'),'1','1') Read_0,
DECODE(BITAND(A3.permissionMask,'1024'),'1024','1') Download_10,
DECODE(BITAND(A3.permissionMask,'2'),'2','1') Modify_1,
DECODE(BITAND(A3.permissionMask,'2048'),'2048','1') ModifyContent_11,
DECODE(BITAND(A3.permissionMask,'65536'),'65536','1') ModifyIdentity_16,
DECODE(BITAND(A3.permissionMask,'8192'),'8192','1') CreatByMove_13,
DECODE(BITAND(A3.permissionMask,'4'),'4','1') Create_2,
DECODE(BITAND(A3.permissionMask,'32768'),'32768','1') SetState_15,
DECODE(BITAND(A3.permissionMask,'128'),'128','1') Revise_7,
DECODE(BITAND(A3.permissionMask,'256'),'256','1') NewViewVersion_8,
DECODE(BITAND(A3.permissionMask,'4096'),'4096','1') ChangeDomain_12,
DECODE(BITAND(A3.permissionMask,'16384'),'16384','1') ChangeContext_14,
DECODE(BITAND(A3.permissionMask,'512'),'512','1') ChangePermissions_9,
DECODE(BITAND(A3.permissionMask,'32'),'32','1') Delete_5,
DECODE(BITAND(A3.permissionMask,'64'),'64','1') Administrative_6
FROM AccessPolicyRule A0,
AdministrativeDomain A1,
(SELECT A2.namecontainerInfo,A2.idA2A2 FROM ExchangeContainer A2 UNION ALL SELECT A2.namecontainerInfo,A2.idA2A2 FROM OrgContainer A2 UNION ALL SELECT A2.namecontainerInfo,A2.idA2A2 FROM WTLibrary A2 UNION ALL SELECT A2.namecontainerInfo,A2.idA2A2 FROM PDMLinkProduct A2) A2,
WTAclEntry A3,
AdministrativeDomain A4,
(SELECT A5.idA2A2,A5.name FROM WTGroup A5 UNION ALL SELECT A5.idA2A2,A5.name FROM WTOrganization A5 UNION ALL SELECT A5.idA2A2,A5.name FROM WTRolePrincipal A5 UNION ALL SELECT A5.idA2A2,A5.name FROM WTUser A5) A5,
WTAclEntry A6
WHERE (((A2.namecontainerInfo = 'Global Product Template') AND (A1.name = 'PDM') AND (A4.name = 'Default'))) 
AND ((A6.idA3B3 = A0.idA2A2)
AND (A6.idA2A2 = A3.idA2A2)
AND (A0.idA3domainRef = A4.idA2A2)
AND (A4.idA3containerReference = A2.idA2A2)
AND (A4.idA3domainRef = A1.idA2A2)
AND (A3.idA3A3 = A5.idA2A2));