Index: access_check.c
===================================================================
--- access_check.c	(revision 24655)
+++ access_check.c	(working copy)
@@ -101,9 +101,9 @@
 		return NT_STATUS_OK;
 	}
 
-	/* empty dacl denies access */
+	/* empty dacl allows access */
 	if (sd->dacl == NULL || sd->dacl->num_aces == 0) {
-		return NT_STATUS_ACCESS_DENIED;
+		return NT_STATUS_OK;
 	}
 
 	/* the owner always gets SEC_STD_WRITE_DAC, SEC_STD_READ_CONTROL and SEC_STD_DELETE */