is a permission mask and can be specified in one of two forms: a sequence of simple rights: F - full access M - modify access ...

   : is a permission mask and can be specified in one of two
                     forms:
            a sequence of simple rights:
                    F  - full access
                    M  - modify access
                    RX - read and execute access
                    R  - read-only access
                    W  - write-only access
            a comma-separated list in parenthesis of specific rights:
                    D    - delete
                    RC   - read control
                    WDAC - write DAC
                    WO   - write owner
                    S    - synchronize
                    AS   - access system security
                    MA   - maximum allowed
                    GR   - generic read
                    GW   - generic write
                    GE   - generic execute
                    GA   - generic all
                    RD   - read data/list directory
                    WD   - write data/add file
                    AD   - append data/add subdirectory
                    REA  - read extended attributes
                    WEA  - write extended attributes
                    X    - execute/traverse
                    DC   - delete child
                    RA   - read attributes
                    WA   - write attributes
            inheritance rights may precede either form and are applied
            only to directories:
                    (OI) - object inherit
                    (CI) - container inherit
                    (IO) - inherit only
                    (NP) - don't propagate inherit