TROUBLESHOOTING

The access specified for subject is different than the subject's actual access
The access you see set for a subject at an extended ACL target may not reflect the actual, effective access the subject has. For example, there may be access set for another subject that takes precedence. Or the database ACL may not actually allow the access that has been set for the subject in the extended ACL. Click Effective Access in the "Extended access at target" dialog box to find out more about what is controlling a particular user's access to an extended ACL target.

See also