An ACCESS_MASK is a 32-bit set of flags that are used to encode the user rights to an object. An access mask is used both