The allowed privileges (a copy).
The denied privileges (a copy).
StaticfromStaticallowAll allowed, nothing denied.
Empties both sets.
Adds an 'allow' assertion per allowed privilege, then a 'deny' per denied one.
StaticfromThe 'allow' and 'deny' assertions of an envelope. An object that
is not a known value is EnvelopeParsing; one that names no
privilege is UnknownPrivilege.
A copy.
An allow set and a deny set of privileges.