Those permissions could be handled only with one checkbox. Checked - allowed, unchecked - Full Control denied, for example.
Why two checkboxes, not one? Also why not radio buttons?