ACCESS_DENIED ACL to POSIX Perms conversion.

[Jeremy Allison]

On Tue, Feb 10, 2015 at 06:01:44PM -0500, John Mulligan wrote:
> 
> I didn't read the whole patch but at least part of what Kenny is describing 
> seems to overlap with this bug I filed a while back: 
> https://bugzilla.samba.org/show_bug.cgi?id=10489
> 
> I worked around our issue for the time being, but the last time I looked Samba 
> 4.1 was unable to generate the 3-element perms in any test case I tried.
> 
> When I took a stab at it the "adding additional ACEs to the ACL" was surely 
> involved in the problem. Somehow the conversion code gets to a point where 
> there were too many aces, and for a lack of a better word, gives up. 
> Unfortunately it was not a high priority for me and I didn't keep on debugging 
> it.

Ah, I remember that bug - thanks for jogging my memory.

Unfortunately making Samba work on top of filesystems
with no ACLs is somewhat of a low priority - I'm not
sure we can do it to fail safely in any case.

I think the approach I suggested in the other email
would work, although for security reasons I don't
think we can use that upstream.