Fine points of ACL conversion

Alexander Bokovoy a.bokovoy at sam-solutions.net
Thu Aug 1 01:27:02 GMT 2002


Hi, Matt!

On Wed, Jul 31, 2002 at 12:03:26PM -0700, ZINKEVICIUS,MATT (HP-Loveland,ex1) wrote:
> > access. So order is very important. However, does it accumulate perms.
> 
> It accumulates and continues as long as none of the request bits have
> been denied. If there are no more ACEs and the full set of request bits
> have not been allowed then permission is denied. If a previously allowed
> bit is denied in a later ACE it is still allowed. That is why ACE
> ordering is important.
> 
> See my patch that I posted a couple months back where I implemented full
> NT security semantics for samba 2.2.3a. This implements NT ACL
> inheritance as well, which is where it can get really scary.
Is there any chance we'll see this patch updated to HEAD?

-- 
/ Alexander Bokovoy
---
Do more than anyone expects, and pretty soon everyone will expect more.




More information about the samba-technical mailing list