[PATCH][samba-4.0 only] fix the share-ACL handling

[Jeremy Allison]

On Tue, Jun 14, 2016 at 04:48:08PM +0000, Peter Somogyi wrote:
> Hi,
> 
> I don't know whether samba-4.0 is still open for any change, but let me 
> attach a 1-liner fix with a reproducer (tested win7, win2012, all other 
> samba level - they all survive except samba-4.0).
> In a nutshell, the problem is that share-ACLs won't restrict users in 
> changing ACLs.
> 
> Alternative was to remove the "csal" structure completely from samba-4.0 
> by picking some of the samba-4.1 patches (loosing 3.6 VFS ABI 
> compatibility), however I failed to figure out exactly which set of 
> patches would surely work stable in production, and feared of removal of 
> this "csal" structure just on my own in a historical code. 
> 
> All in all, a hard test effort is unavoidable after touching this area.

Sorry, but 4.0 is out of support from samba.org. If you want to
preserve this - log a bug at bugzilla.samba.org and attach the
patch to the bug report so others may find it again.

Cheers,

	Jeremy.