Disclaimer: I only understand how NTFS ACLs work. Say you have users with home directories, all users share the same primary group, Apache is serving public_html (presume Apache needs 'other' ...
The access controls typically support inheritance along the lines of the directory hierarchy. We will not delve into all these details but restrict the discussion to the differences of the three ...