Fix bug #8797 - Samba does not correctly handle DENY ACEs when privileges apply.