smbcacls support for automatic inheritance propagation

[Noel Power]

On 06/11/13 22:03, Jeremy Allison wrote:

[...]
>> I don't have time right now to do a full review, but as soon
>> as I have a little more free time I'd be happy to work though
>> getting this into the tree with you.
that would be great, I really appreciate that
>
> To quickly comment on your concerns, smbcacls I think can
> already set ACLs that the Windows ACL editor doesn't like,
> but having said that we should try as hard as possible to
> warn the user if they're doing something stupid. That doesn't
> mean we have to stop them though
I should clarify that currently my intention is not to modify the base
behaviour of smbcalcs, my comments regarding not supporting '--set' &
making 'add,delete & modify' more restrictive are purely in the context
of when the '--propagate-inheritance' flag is specified. My thinking
here being if you request automatic inheritance propagation then that's
what it should do ( including not letting you do stupid things ) the
base smbcacls behaviour remains and gives you the ultimate power tool
experience ( including making windows unhappy  )
Note: there are comments in the patch that indicate an ultimate
intention to remove the '--propagate-inheritance' and fold the
inheritance awareness into the base behaviour of smbcacls, those
comments pre-date some of the concerns previously expressed, at the
moment I favour keeping the '--propagate-inheritance' flag and
associated behaviour separate.
> Cheers,
>
> 	Jeremy.
thanks again

Noel