Glossary term
Discretionary ACL controlling allow/deny for access rights.
intermediate
Owners, DACL/SACL, ACE ordering, and the object-side policy Windows enforces.