[Samba] multiple levels of group permissions on some folders in a share

[Harondel J. Sibble]

trying to figure out the best way to accomplish this, running samba 3.x on a 
debian system in share level mode (workgroup)

have a shared folder for all the staff that they have permssions to by 
membership of being in the "staff" group, this share has about 40-50 
subfolders.

now they have an intern starting and want to restict that intern to 5 of 
those folders which they'll access from an XP machine

I could create a new share for each folder, but if they decide to expand the 
list of allowed folders, that gets clunky.

So I created a new share for the intern and symlinked the 5 subfolders which 
they can see just fine, but they get a permission denied which makes sense 
since the intern account is not part of larger group with access to the 5 
folders in question.

What's the best way to allow them access to the 5 folders without allowing 
them to get access to the other 45 or so folders?
-- 
Harondel J. Sibble 
Sibble Computer Consulting
Creating Solutions for the small and medium business computer user.
help at pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com
Blog: http://www.pdscc.com/blog
(604) 739-3709 (voice)