Re: [nfsv4] Re: [NFS] NFSv4 ACL and POSIX interaction / mask, draft-ietf-nfsv4-acls-00 not ready

On Fri, Jul 14, 2006 at 02:38:41PM -0400, wurzl_mario@emc.com wrote:
> >> -----Original Message-----
> >> From: J. Bruce Fields [mailto:bfields@fieldses.org] 
> >> Sent: Friday, July 14, 2006 14:00
> >> To: nfsv4@ietf.org
> >> Cc: Sam Falkner; nfs@lists.sourceforge.net; Spencer Shepler; 
> >> Brian Pawlowski
> >> Subject: [nfsv4] Re: [NFS] NFSv4 ACL and POSIX interaction / 
> >> mask,draft-ietf-nfsv4-acls-00 not ready
> >> 
> >> 
> >> For a client that doesn't support the new attributes, a 
> >> server can apply
> >> the mask attributes to the ACL before returning it.  I suppose a
> >> multi-protocol server would do the same for CIFS clients.
> >> 
> Since CIFS does not understand the semantics of permission mask, does
> the server enforce the mask when the access for the data comes from
> a CIFS client ?

Yes, it does.  But it also only ever shows CIFS clients a version of the
ACL with the mask already applied, so CIFS clients see no inconcistency.
(In other words, if there's an "ALLOW bfields READ+WRITE" ACE, but the
relevant mask only allows READ, then the CIFS client will see a version
of the ACL where that ACE only allows READ.)

See any reason why that won't work?

--b.

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4