Regression in AccessCheck?

[Dan Kegel]

http://bugs.winehq.org/show_bug.cgi?id=6845
describes two apps whose installs fail because
of what looks like a problem in AccessCheck.
I attached my attempt at a fix, and it does get
those two apps to install, but the advapi security
conformance tests fail after applying it.

Can someone familiar with AccessCheck / NtAccessCheck
have a look?  Thanks!