The values of the access mask in the DACL are documented on MSDN: https://msdn.microsoft.com/en-us/library/aa392710(v=vs.85).aspx.
The standard access rights ReadSecurity and WriteSecurity are also relevant. The access mask is a composite of the values listed here:
- EnableAccount: 1
- ExecuteMethods: 2
- FullWrite: 4
- PartialWrite: 8
- WriteProvider: 16
- RemoteEnable: 32
- ReadSecurity: 131072
- WriteSecurity: 262144