DENY
defl_verdict = DENY;
if ((access_mask & ACE_EXECUTE) && type == DENY)
zfs_set_ace(aclp, zacep, masks.deny1, DENY, -1, ACE_OWNER);
zfs_set_ace(aclp, zacep, masks.deny2, DENY, -1, OWNING_GROUP);
if ((type != ALLOW && type != DENY) ||
if (type == DENY) {
case DENY:
case DENY: