Glossary term
User-mode access-check API mirroring the core decision logic.
expert
How Windows actually decides allow/deny using tokens, descriptors, and SRM routines.