code: public void addNegative(User user, AccessLevel accessLevel) {
          getAccessList().add(new Access(user, accessLevel, true));
      }
docs: Add the user to the access list with it's appropriate {@link AccessLevel}
  but this rule means not this user (~user)
  @param user The user which it shouldn't be.
  @param accessLevel The level of access for the non users.