uses
  JwaWindows,
  JwsclExceptions,
  JwsclACL,
  JwsclSID,
  JwsclConstant;

var
  tempDACL, DACL: TJwDAccessControlList;
  SID: TJwSecurityID;

  EffectiveAccess: TJwAccessMask;
begin
  //a DACL and SID from anywhere
  …

  try
    EffectiveAccess := DACL.GetEffectiveRights(SID);
  except
    on E: EJwsclWinCallFailedException do
    begin
      if E.LastError = ERROR_NONE_MAPPED then
      begin
        tempDACL := TJwDAccessControlList.Create;
        try
          tempDACL.Assign(DACL); //copy ACL

          for i := tempDACL.Count – 1 downto 0 do
          begin
            try
              //we check only
              tempDACL.Items[i].SID.AccountName[”];
            except
              tempDACL.Remove(i);
            end;
          end;

          EffectiveAccess := tempDACL.GetEffectiveRights(SID);
        finally
          tempDACL.Free;
        end;
      end;
    end
    else
      raise;
  end;

  {for example we map the AccessMask to File/Folder access rights.
  You can use other mappings from JwsclConstants.
  }
  Writeln(JwFormatAccessRights(EffectiveAccess,
    {e.g. JwsclConstants.}FileFolderMapping));
  …