[OpenAFS-devel] Re: Methods of Restricting AFS3 ACL rights (correctness+performance)

[Adam Megacz]

Andrew Deason <adeason@sinenomine.net> writes:
>> > I said you put a transitive ACL on foo/dir.
>> 
>> Then do what I said one more level up.
>
> Yes, so then it's not terribly useful, unless you always use it at the
> volume root.

I think you mean "below the volume root", not "at the volume root":

  cd       /afs/@cell/$SOMEWHERE
  fs mkm   mountpoint myvolume
  fs sa    mountpoint/x/y !system:authuser a -negative -transitive
  fs sa    mountpoint/x/y/z/q newbieuser all

  - a