I am totally confused with DSS ACL. When I allow to user1 RWX on share TEST, it works fine. Then I allow to User2 R on share TEST, it faces access deny. As I understand user has only 2 conditions, RWX or access deny.

I want following on share TEST:

User1: RWX
User2: R_ _

Please guide me step-by-step configuration.