Access permissions

What takes precedence when a user is assigned both allow and deny access permissions?

Deny takes precedence