Messages in this thread | | | Date | Wed, 23 Sep 2015 17:05:31 -0400 | From | "J. Bruce Fields" <> | Subject | Re: [RFC v7 26/41] richacl: Apply the file masks to a richacl |
| |
On Wed, Sep 23, 2015 at 10:40:18PM +0200, Andreas Gruenbacher wrote: > 2015-09-23 22:33 GMT+02:00 J. Bruce Fields <bfields@fieldses.org>: > > The same could be said if there's a group-i-belong-to:rwx::allow entry, > > do we make that exception too? > > We cannot because that would be incorrect for all other group members.
OK. So people have to learn how the group mask works anyway, and now they have to learn a special exception to that rule.
I don't like having this exception. Or making the richacl->v4acl translation dependent on the owner.
But I admit it's surprising to that an 0700 mask with "bfields:rwx::allow" ACL denies access to a bfields-owned file.
--b.
| |