(type, option_flags, access_to_grant)
                                     ^

This item indicates what type of access is to be granted to the accessor,
and (depending on the type of ACE) whether or not to log successful attempts
or unsuccessful attempts to access the file.  It may be any of the following:

        NONE            READ                    SUCCESS
                        WRITE                   FAILURE
                        EXECUTE
                        DELETE
                        CONTROL