What to do when Windows client asks you to set permissions that you can't?

Richard Sharpe rsharpe at richardsharpe.com
Wed Mar 19 21:59:52 GMT 2003


Hi,

A question I have relating to ACLs is the following:

What should you do (In Samba etc) if you get an ACE in an ACL where the 
ACE contains permission bits that you do not implement?

You could:

 1. Deny the request, leaving the user not knowing which
    bits were good and which not.

 2. Ignore the bits you don't process, leaving the user
    in a state of confusion about which bits you support
    and which you don't. That is, leaving them not
    trusting the file system.

Are there any other choices (assuming that implementing all the NT bits is 
out of the question).

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com



More information about the samba-technical mailing list