anchor.diff:      % rdwr permission on different ACEs, not allowed
       ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User1, ?read_mask bor ?write_mask, FileCtx)),
       % rwx permission, not allowed
  -    ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User1, ?read_mask bor ?write_mask bor ?execute_mask, FileCtx)),
  -    % x permission, not allowed
  -    ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User1, ?execute_mask, FileCtx)),
  +    ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User1, ?read_mask bor ?write_mask bor ?traverse_container_mask, FileCtx)),
  +    % x permission, not allowed
  +    ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User1, ?traverse_container_mask, FileCtx)),
       meck:validate(file_ctx),
       meck:unload().
   
  
positive.code: 
      % then
      ?assertEqual(Acl, [
          #access_control_entity{acetype = ?allow_mask, identifier = UserId, name = UserName, aceflags = ?no_flags_mask, acemask = ?read_mask bor ?write_mask},
          #access_control_entity{acetype = ?deny_mask, identifier = GroupId, name = GroupName, aceflags = ?identifier_group_mask, acemask = ?write_mask}
      ]).
  
  
  
negative.code:     % rdwr permission on different ACEs, not allowed
      ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User2, ?read_mask bor ?write_mask, FileCtx)),
      % rwx permission, not allowed
      ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User2, ?read_mask bor ?write_mask bor ?traverse_container_mask, FileCtx)),
      % x permission, not allowed
      ?assertEqual(?EACCES, catch acl:assert_permitted([Ace5, Ace6], User2, ?traverse_container_mask, FileCtx)),
      meck:validate(file_ctx),
      meck:unload().
  
  