You want to view the effective permissions for a user or group on a particular object.
22.214.171.124 Using a graphical user interface
126.96.36.199 Using a command-line interface
> acldiag <ObjectDN> /geteffective:<UserOrGroup>
Viewing the permissions on an object does not tell the whole story as to what the actual translated permissions are for a user or group on that object. The effective permissions of an object take into account all group membership and any inherited permissions that may have been applied further up the tree.