I can't seem to find any info on the PyACL methods that modify an ACL as to whether or not they enforce canonical ordering, I hate assume but given the role of some of the methods it does look it would need to? Thanks, jlc