Describe the bug
When a deny OU permission is made further up then it will cause the error:

This access control list is not in canonical form and therefore cannot be modified. at System.Security.AccessControl.CommonAcl.ThrowIfNotCanonical()

To Reproduce
Steps to reproduce the behavior:

1. Go to root OU and add a deny permission and apply to all children
2. Create a new Hosted Org in SolidCP
3. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots

SolidCP Info

• SolidCP Version: 1.4.4