For example, one entry listed in the ACL 120 may otherwise allow members of “{HEAD ~ Group3” access} to the object 112, but another entry in the ACL 120 may specifically deny “{TAIL ~ Group24}” all access 
For example , one entry listed in the ACL 120 may otherwise allow members of “ { HEAD ~ Group3 ” access } to the object 112 , but another entry in the ACL 120 may specifically deny “ { TAIL ~ Group24 } ” all access
OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH HEAD HEAD HEAD HEAD HEAD HEAD HEAD OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH OTH TAIL TAIL TAIL TAIL TAIL OTH OTH OTH