Nodes are inheriting ACL from a parent node. If you don't see any ACL that are explicitly defined for /var node, it means that /var will have the same ACL as "/".
If you need to tune /var node ACL click on green + button, choose group or user and define a desire ACL