> Improving ACL fabrication and making it do a better job of approximating
> NFSv4 ACL, will still have the following problem:
>
> >>
> >> - The user could retrieve the fabricated ACL on the client and attempt
> >> to perform some operation only to be denied when the "real" ACL is
> >> evaluated on the server.
This was my compelling reason for not doing my normal, I hate
configuration options, please fix it so ACL fabrication works.
IMO, it can't be reasonably fixed because ACL/ACE are different.
That's something we/the ARC accepted in the ZFS and NFSv4 cases.
Gary..
