the server checks the ACL assigned service. 

If the client is a member of an allowed group and is not a member of a denied group,
the server executes the service.if the client is not a member of an allowed group,the server denies the request to invoke the service and stops executing.