# Possible AccessMask Values

AccessMask Value | Corresponding Permissions
--- | ---
`NoAccess` | When Plesk applies security rules to an object, generic deny entries will be removed from the object’s DACL. However, allow entries will remain in the object’s DACL.
`Read` | Generic read
`ReadAndExecute` | Generic execute
`ReadAndDelete` | Generic delete
`ReadWrite` | Generic write
`Modify` | Generic write, execute, and delete
`FullAccess` | Full control
`FileRemovable` | Write extended attributes, delete and write to DACL, write owner, delete subfolders and files.
`FileNonRemovable` | Full control excluding write attributes for files, write extended attributes for files, delete and write to DACL, write owner, and delete subfolders and files.
`FtpSubaccountsNonRemovable` | Write extended attributes, add file, create directory, write attributes, and delete subfolders and files.