Baseline access comes from the website role preset (what your role can edit). On individual nodes, users with MANAGE_NODE_PERMISSIONS can tighten or open access further in the overlay sidebar.
Rules of thumb
- ACL changes apply to that node; inheritance may apply from parents depending on the tree.
- Editors without manage permission see the effective access but cannot edit the ACL.
- Dashboard admins can also review node permissions under Content · Node permissions.
Roles first
Prefer fixing the website role preset before sprinkling one-off ACLs — What your role can do.