DCE authorization defines two basic kinds of ACL entries:
· Those that associate a specified privilege attribute with a permission set; these are privilege attribute entries.
· Those that specify a permission set that masks a permission set specified in a privilege attribute entry; these are mask entries.
The following topics describe the two kinds of ACL entries in detail.
More:
Privilege Attribute Entry Types