[Samba] access to files continues after removing user from group

[Jeremy Allison]

On Wed, May 11, 2016 at 11:17:40AM -0500, Chad William Seys wrote:
> Hi Jeremy,
> 
> >Because that's just the way the process model works.
> 
> So security nuts didn't get involved early enough?  Or maybe there is some
> performance problem of checking on each access (at least back when model
> developed).
> 
> Or maybe the process model is more like gravity?  That is how it is, but
> no-one knows why.  ;)

Think about scalability. Think about the number of processes
running on a box/cluster and the number of asynchronous notify
messages that would have to update the token of running processes
on every edit to the password/group db.