Is it possible to "un deny" permissions to a node?

Question

I realize the best practice is to always use Allow and avoid Deny due to having little control over the order in which the Allow/Deny statements are implemented and evaluated.
We mistakenly Allowed access to a particular node, and merely want to remove the Allow statement, but this action produces a 'Deny' statement. Is there any way for me to go back to a blank box with no declared entry?

Answer 1

Yes... here's the situation:
User X is a member of both Group A and Group B
Group A previously had Read/Modify/Create/Delete/Replicate to Node XYZ; permissions have been modified for this node so they are now only allowed Read access for Node XX. When I look at the Permissions Tab in the Security Console, Node XYZ has * next to the empty boxes for Modify/Create/Delete/Replicate:
Group B has ALLOW for Read/Modify/Create/Delete/Replicate to Node XYZ.
When User X is a member of both groups, the lower Group B permissions are trumping, and the user is unable to modify the content in node XYZ.
If I remove User X from Group A, they can edit the content in node XYZ.
When you say 'So you can go to useradmin and safely remove the permission', is 'useradmin' the Security Console? Or is there some other back door where I can remove the DENY statement?