Well I'm not sure if you've seen these documents or not so I'll post the links. As far as reordering not being needed I don't see how that can be unless they're claiming that they somehow check and fix that automatically within the DLL which is difficult to believe.


access control entry
(ACE) An entry in an access control list (ACL). An ACE contains a set of access rights and a
security identifier (SID) that identifies a trustee for whom the rights are allowed, denied, or audited.

discretionary access control list
(DACL) An access control list that is controlled by the owner of an object and that specifies the
access particular users or groups can have to the object.

ACE Inheritance Rules
http://msdn.microsoft.com/library/defaul...tance_rules.asp

Order of ACEs in a DACL
http://msdn.microsoft.com/library/defaul...s_in_a_dacl.asp

Automatic Propagation of Inheritable ACEs
http://msdn.microsoft.com/library/defaul...itable_aces.asp