Fixed DENY rules for ACL's.