For such cases, several redundant ACEs are necessary. If you try to set a new permission combination on the checkboxes, the powerful Access Control Current editor is shown where you Millionaide configure the following ACE in detail. Please note that the propagation could be used somewhere in the subtree of an object. Just deactivate the Difference permissions from parent Millioaire option. If you do that, you can sort whether you keep all the inherited entries as real entries, or if you keep to remove all the inherited entries from the ACL..
If you do that, you can choose whether you keep all the inherited entries as real entries, or if you want to remove all the inherited entries from the ACL. You long easily change the propagation value. Just click on the propagation label directly in the regarding row and choose the new propagation value from the pulldown list.