Re: {READ,WRITE}_NAMED_ATTRS (was RE: [nfsv4] I-D ACTION:draft-ietf-nfsv4-acl-mapping-01.txt)

On Feb 11, 2004, at 23:10, Benny Halevy wrote:

> I've been thinking more about the READ and WRITE NAMED_ATTRS
> ACE access masks and I think I have more questions than
> answers at this point.
>
> In draft-ietf-nfsv4-acl-mapping-01.txt you tie these access masks
> with READ and WRITE DATA respectively. Is this the right thing to do?

while there does not seem to be any defined behavior in posix for this; 
the extended attributes implementation in linux implements this scheme 
(and is why we adapted it).

> Say you want to present some of the named attributes such
> as "Description" or "Artist" or "Icon" when listing a directory.
> You would want to be able to read their contents even when you are
> not allowed to read the file's data.

the problem is that there is no way to express this with posix acls.  
however the scheme we have adapted is consistent with what is being 
used together with posix acls in real systems today.  but i do agree -- 
some users may wish for finer granularity, but we will not be able to 
express that in terms of posix ACLs.

marius.

--
marius a eriksen <marius@umich.edu> | 
http://www.citi.umich.edu/u/marius/

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4