An ACL contains required roles, a condition, and a script. How are its configured checks generally combined?

1. The form view determines whether scripts run
2. The user must satisfy the required-role test and the condition and script
3. The script is ignored when a role is configured
4. Any one passing check always overrides all others