ACL / SDs

[Luke Kenneth Casson Leighton]

> > > GrantedAccess out-parameter or SeAccessCheck.
> > >
> > > or the user's group.  or group members.
> 
> So that means, that the order of the ACEs _is_ important?

correct.

> As far, as I understood SDs in NT, the order shouldn't be
> important...

also correct, you can put whatever the hell you like in them.

> but maybe that's only for the actual
> access-checking.
absolutely correct.