. . . "An ACE contains information such as an action - is the action allowed or denied - and the security principal to which the allowed or denied action applies." .