[Samba] Standalone server and POSIX ACL issue

[Rowland penny]

On 09/07/2019 20:06, Yvan Masson via samba wrote:
> Hi,
>
> First, thanks for all people that continuously giving great advice on 
> this list!
>
> I am setting up a standalone server (Debian 10, Samba 4.9.5+dfsg-5 
> from Debian). The following directory is shared and contains two 
> directories:
> /home/eleve/partage/
> ├── Documents
> └── Travail
>
> I want user "eleve" to be able to modify everything, and guest users 
> to have read access on "Documents/" and write access on "Travail/". 
> Everything works as expected when accessing files locally, but not 
> when mounting the share from a Linux client:
> - when logged in as guest, I can read everything but have no write 
> access in "Travail/"
> - when logged in as "eleve", I can not write inside "Documents/"
You would be better off setting up two shares
>
> I suppose I am missing something simple, but can not find what (I have 
> read 
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs).
I know that page refers to a standalone server, but it is mostly aimed 
at AD domain members, though the basics should work on a standalone server.

Rowland