This is another way to solver solve the permissions allow/deny problem. Instead of Deny being a Deny, it is a DisAllow, where you filter the allows. The difference from the first pass is that an equal inherited allow and deny will result in an allow, and the depth of the inheritance is a factor.
...