Hi, Matt! On Wed, Jul 31, 2002 at 12:03:26PM -0700, ZINKEVICIUS,MATT (HP-Loveland,ex1) wrote: > > access. So order is very important. However, does it accumulate perms. > > It accumulates and continues as long as none of the request bits have > been denied. If there are no more ACEs and the full set of request bits > have not been allowed then permission is denied. If a previously allowed > bit is denied in a later ACE it is still allowed. That is why ACE > ordering is important. > > See my patch that I posted a couple months back where I implemented full > NT security semantics for samba 2.2.3a. This implements NT ACL > inheritance as well, which is where it can get really scary. Is there any chance we'll see this patch updated to HEAD?
-- / Alexander Bokovoy --- Do more than anyone expects, and pretty soon everyone will expect more.
