Re: [nfsv4] Re: [NFS] NFSv4 ACL and POSIX interaction / mask, draft-ietf-nfsv4-acls-00 not ready

On Fri, Jul 14, 2006 at 12:26:29PM -0700, Yoder, Alan wrote:
> Let me see if I understand.
> 
> A POSIX ACL client sees ALLOW bfields READ+WRITE

Not necessarily "POSIX ACL" clients, but clients that request the new
mask attributes.  Such clients also understand that the relevant mask
makes that ALLOW effectively the same as just an allow of READ.

> A *nix client that only does perms sees r

In the group bit, yes.

> A client that only does CIFS sees ALLOW bfields READ

Right.

> If I have that right, this is like going straight to hell 
> for a multi-protocol server company.

Why?  As far as I can tell, for the multi-protocol server it's a mild
improvement over the current situation.

Right now any client attempting to do posix-draft ACL's (or implementing
full NFSv4 ACLs and strictly adhering to posix requirements on
permissions mechanisms) is setting ACLs with complicated interleaved
DENYs and ALLOWs that, I'm told, no reasonable Windows application is
going to be able to make head or tails of.

My revision of the posix acl draft allows such clients to do that kind
of thing less often.

But Andreas's proposal removes the need for clients to do that stuff in
many more cases.  And the server-side implementation seems doable.

--b.

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4