I'm working with Win32::FileSecurity and I'm having no problem identifying those users that have been *granted* particular rights on a folder. However, I also need to identify rights that have been *denied* a user. For example, a user that's part of the Power Users group that, for whatever reason, has had access to a given folder explicitly revoked.
Is there a different mask I could be using? A different procedure call? A different module? Any and all help is, of course, greatly appreciated.