Note: NT ACLs are ordered, but AFS ACLs are unordered. Rights to an object under AFS are mapped to integer values. AFS access rights equal the sum of positive and negative rights.