An ACL which is used in determining the initial discretionary access control information for objects created within a directory.