In DACLs, among the explicit ACEs, ACEs that deny access take precedence over ACEs that allow access.

• 在DACL中,对于显式的ACE,拒绝访问的ACE优先于允许访问的ACE。