   `ace_order` int(11) NOT NULL,                                   -- an order of permissions priority (AccessControlEntry (ACE) represents individual permission assignment)
   `sid` bigint(20) NOT NULL,                                      -- a link to a acl_sid table - who gets the permissions
   `mask` int(11) NOT NULL,                                        -- bit mask, which identifies the permissions (for example for read, write etc.)
-  `granting` tinyint(1) NOT NULL,                                 -- a value, that identifies whether the permission is allowed or not (for JCommune - 1 - allowed, 0 - not allowed)
-  `audit_success` tinyint(1) NOT NULL,
-  `audit_failure` tinyint(1) NOT NULL,
+  `granting` tinyint(1) NOT NULL,                                 -- a value, that identifies whether the permission is allowed or not (for JCommune - 1 - allowed, 0 - not allowed). The granting field, if set to true, indicates that the permissions indicated by mask are granted to the corresponding sid, otherwise they are revoked or blocked.
+  `audit_success` tinyint(1) NOT NULL,                            -- A flag to indicate whether to audit a successful permission
+  `audit_failure` tinyint(1) NOT NULL,                            -- A flag to indicate whether to audit a failed permission
   PRIMARY KEY (`id`),
   UNIQUE KEY `uk_acl_entry` (`acl_object_identity`,`ace_order`),
   KEY `fk_acl_entry_obj_id` (`acl_object_identity`),

--
-- Table structure for table `acl_object_identity`
--
-- Each table entry is the representation of the object. for which the permissions are given
--
DROP TABLE IF EXISTS `acl_object_identity`;
CREATE TABLE `acl_object_identity` (

DROP TABLE IF EXISTS `acl_sid`;
CREATE TABLE `acl_sid` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT,
  `principal` tinyint(1) NOT NULL,                         -- a label, that shows whether the object is principal(is there a possibility to login with this object or not, i.e. groups cannot be here; true indicates that the sid is a user, false means that the sid is a granted authority)
  `sid` varchar(100) NOT NULL,                             -- an entity, which get the permissions()
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_acl_sid` (`sid`,`principal`)
