On Dec 9, 2009, at 2:09 PM, Gary Winiger wrote:
>> Improving ACL fabrication and making it do a better job of
>> approximating
>> NFSv4 ACL, will still have the following problem:
>>
>>>>
>>>> - The user could retrieve the fabricated ACL on the client and
>>>> attempt
>>>> to perform some operation only to be denied when the "real" ACL is
>>>> evaluated on the server.
>
> This was my compelling reason for not doing my normal, I hate
> configuration options, please fix it so ACL fabrication works.
> IMO, it can't be reasonably fixed because ACL/ACE are different.
> That's something we/the ARC accepted in the ZFS and NFSv4 cases.
After thinking about it some more, I reluctantly agree.
+1 to the case.
-- Glenn
