diff --git a/source/java/org/alfresco/repo/solr/AclReaders.java b/source/java/org/alfresco/repo/solr/AclReaders.java
index 93cd721040..93275d0a1e 100644
--- a/source/java/org/alfresco/repo/solr/AclReaders.java
+++ b/source/java/org/alfresco/repo/solr/AclReaders.java
@@ -32,13 +32,14 @@ public class AclReaders
 {
     private Long aclId;
     private Set<String> readers;
+    private Set<String> denied;    
     private long aclChangeSetId;
     private String tenantDomain = TenantService.DEFAULT_DOMAIN;
     
     @Override
     public String toString()
     {
-        return "AclReaders [aclId=" + aclId + ", readers=" + readers + ", aclChangeSetId=" + aclChangeSetId + ", tenantDomain=" + tenantDomain + "]";
+        return "AclReaders [aclId=" + aclId + ", readers=" + readers + ", denied=" + denied + ", aclChangeSetId=" + aclChangeSetId + ", tenantDomain=" + tenantDomain + "]";
     }
     public Long getAclId()
     {
@@ -56,6 +57,14 @@ public class AclReaders
     {
         this.readers = aclReaders;
     }
+    public Set<String> getDenied()
+    {
+        return denied;
+    }
+    public void setDenied(Set<String> denied)
+    {
+        this.denied = denied;
+    }
     public long getAclChangeSetId()
     {
         return aclChangeSetId;
diff --git a/source/java/org/alfresco/repo/solr/SOLRTrackingComponentImpl.java b/source/java/org/alfresco/repo/solr/SOLRTrackingComponentImpl.java
index a18da63ac0..6b96028edd 100644
--- a/source/java/org/alfresco/repo/solr/SOLRTrackingComponentImpl.java
+++ b/source/java/org/alfresco/repo/solr/SOLRTrackingComponentImpl.java
@@ -257,10 +257,12 @@ public class SOLRTrackingComponentImpl implements SOLRTrackingComponent
             List<AclReaders> aclsReaders = new ArrayList<AclReaders>(aclIds.size() * 10);
             for (Long aclId : aclIds)
             {
-                Set<String> readersSet = permissionService.getReaders(aclId);
                 AclReaders readers = new AclReaders();
                 readers.setAclId(aclId);
+                Set<String> readersSet = permissionService.getReaders(aclId);
                 readers.setReaders(readersSet);
+                Set<String> deniedSet = permissionService.getReadersDenied(aclId);
+                readers.setDenied(deniedSet);
                 
                 Long aclChangeSetId = aclDAO.getAccessControlList(aclId).getProperties().getAclChangeSetId();
                 readers.setAclChangeSetId(aclChangeSetId);