Pylons/substanced — pull request #193 by tseaver (2014-02-08 23:40:05+00:00)
Title: Prevent punning DENY_ALL via the 'add ACL' form.

Direct the user to disable inheriting the parent ACL (for non-root).

Fixes #176.