$sid = New-Object System.Security.Principal.SecurityIdentifier('S-1-5-21-4178830254-1499118431-1315729128-3960883439')
$acl = Get-Acl 'C:\Users\Jacy\0projects\2026062901-dukang-v1\.git'
$rules = $acl.Access | Where-Object { $_.IdentityReference -eq $sid -and $_.AccessControlType -eq 'Deny' }
foreach ($r in $rules) { $acl.RemoveAccessRule($r) | Out-Null }
$acl | Set-Acl 'C:\Users\Jacy\0projects\2026062901-dukang-v1\.git'
Write-Host 'done'