Share and filesystem allows
Label: original fictional table. No share was opened. .lab.invalid was not queried.

Simplified course rule, for this table only:
Effective network allow is the actions that appear in both the share allow list and the filesystem allow list.
This table has no deny entries. It ignores inheritance, ownership, group accumulation, and the fact that a local logon does not use the share list.

Activity row, share minutes, on files-3:
Share allow for readers: read
Filesystem allow for readers: read, write

Seeing the share name notes is not access.