usershare acl parser?

[Jeremy Allison]

On Sat, Dec 10, 2005 at 10:52:51PM -0800, Andrew Bartlett wrote:
> 
> Other than being a subset, and given that share ACLs can be (if not
> meaningfully) set to any ACL, is it not worth using the 'standard'
> format?

No, it's not just a subset it's a almost a completely different
animal. What would setting : 

WRITE_DAC_ACCESS | SYNCHRONIZE_ACCESS | FILE_EXECUTE

*possibly* mean in a share context ? That's something that
might come out of a generic ACL. Remember, people are going
to have to be able to read and type this on a UNIX command line.
Hands up anyone who knows the Microsoft text ACL format..... :-).

Remember, the syntax is just "[user|group]:[F|R|D]". Complete
ACLs are so much overkill for this it's not even funny :-).

Jeremy.