The API checks each security principal that is listed in the access token against each ACE in the DACL to determine whether the requested permission is allowed or denied.

• API根据DACL中的每个ACE检查访问令牌中列出的每个安全主体,决定是否允许或拒绝请求的权限。