
|
Complexity: Allowed ACE, Required Principals Server may advertise limitations on the number/type of ACEs allowed internally (section 6.3) Deny ACEs Inverted ACEs Only one per principal Server may advertise what ACEs must exist (section 6.4) This shouldn’t make modeling permissions harder Client could ignore these and attempt to set the ACL improperly, but would get error |