AclModified removePending Mask Object type name owner ownerDomain group groupDomain PermissionString Flags Acl type Ace type typeValue domain user Flags Mask true false