oleaut32: olepicture: When drawing metafiles set the coordinates system so that it is drawn in the correct place.

advapi32: Allow GetFileSecurityA/W to work on files that have been opened already with restricted sharing flags.

Only use the minimum required access rights for the information being retrieved.

server: Use ACL_REVISION in create_default_dacl instead of MAX_ACL_REVISION since we don't use any features from later ACL revisions.