symbolic links

[Morrison, Bradley A.]

I have a security question.  We are considering allowing every user to have
Samba access to his/her home directory.  Access to every other shared
directory requires a fair amount of paperwork, plus certification that the
user's PC is up-to-date regarding virus protection (we just got bitten by
the Love Bug to the tune of 20,000+ Landmark JPEGs).

The question is: Is there a way to control how symbolic links are traversed
over a Samba link?  I know, it seems silly, but I have been "asked to ask".

The problem is that granting access to users' home directories doesn't limit
them to their home directory, if they have a symlink to anywhere else.