> > order matters and @ALL rule is last Does this mean that every rule listed in the file can only add permissions but never revoke those that are given by previous (or even subsequent) ones? AS