Note that the ACL 120 may contain one or more identifiers that are marked for denying {TAIL ~ users} of {HEAD ~ groups access} rather than granting access thereto 
Note that the ACL 120 may contain one or more identifiers that are marked for denying { TAIL ~ users } of { HEAD ~ groups access } rather than granting access thereto
OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH TAIL TAIL TAIL TAIL TAIL OTH HEAD HEAD HEAD HEAD HEAD HEAD OTH OTH OTH OTH OTH