What is the proper way to filter documents based on tokens?

[Naveen.A.N]

I am not sure what is the proper way to filter the documents using ACL
tokens in Active Directory.
The document contains document allow tokens and document deny tokens. also,
I have the user tokens. Do we need to filter like "user tokens which are in
document allow and not in document deny"  is that correct way of doing
filtering document for a user?
-- 
Thanks and Regards,
Naveen A.N
Lead Software Developer
SearchBlox Software, Inc.
www.searchblox.com
Ph: +91 9445389179