Precise meaning of container inherit?

[Eric Lee Steadle]

I'm studying ACL inheritence right now and am quite familiar with the intracacies.

CONTAINER_INHERIT_ACE means that child containers created within a parent container should inherit the ACE that the
CONTAINER_INHERIT_ACE bit is set upon.

So, for example, if I had an ACE on my directory (a container object) that denied everyone DELETE permission, and the
CONTAINER_INHERIT_ACE bit was set, then a sub-directory (also a container object) created in this directory should also have an ACE
that denies everyone DELETE permission. Files (which are not containers, but are objects in W2K parlance) created in this directory
would NOT necessarily inherit this ACE.

Good Reference: "Programming Windows Security" by Keith Brown; Addison Wesley, 2000.

HTH,

ERX


>-----Original Message-----
>From: samba-technical-admin at lists.samba.org
>[mailto:samba-technical-admin at lists.samba.org]On Behalf Of Richard
>Sharpe
>Sent: Friday, May 17, 2002 2:33 PM
>To: samba-technical at samba.org
>Subject: Precise meaning of container inherit?
>
>
>Hi,
>
>My code to convert NT ACLs to PanFS ACLs has just stumbled across
>Container Inherit, and tried to create a dup ACE.
>
>What exactly does Container Inherit mean?
>
>Regards
>-----
>Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org,
>sharpe at ethereal.com
>