TAce = packed record
  AceType: byte;
  case byte of
    ACCESS_ALLOWED_ACE_TYPE: (accessAllowedAce: TAccessAllowedAce;);
    ACCESS_DENIED_ACE_TYPE: (accessDeniedAce: TAccessDeniedAce;);
    SYSTEM_AUDIT_ACE_TYPE: (systemAuditAce: TSystemAuditAce;);
end;