 Each accessible object contains an identifier to its ACL.The privileges or permissions determine specific access rights, such as whether a user can read from, write to, or execute an object.In some implementations, an ACE can control whether or not a user, or group of users, may alter the ACL on an object.