FLS6 — the cross-role read-required clamp (4.3): Writer grants Title Read+Update=Allow and Denier denies Read. Each row is individually legal; only the post-aggregation clamp can make the combination update-denied.
FLS6 — the cross-role read-required clamp (4.3): Writer grants Title Read+Update=Allow and Denier denies Read. Each row is individually legal; only the post-aggregation clamp can make the combination update-denied.