[OpenAFS] user-visible change suggestion for fs setacl
Tue, 16 Dec 2008 16:10:52 -0800
What's the semantics for negative ACLs? For example,
fs sa . system:authuser rl
fs sa . badguy +rl -negative
I'm guessing that'll give badguy negative "rl" bits.
Should 'fs sa . badguy -rl' implicitly give him negative "rl" bits, if
he doesn't have anything already?
On Tue, Dec 16, 2008 at 10:42 AM, Derrick J Brashear
> The provided patch adds the ability to add or subtract rights from an acl
> element, e.g. a+ or a- to add or subtract the administer bit from an acl,
> like fs sa . shadow a+
> would give shadow the a bit in addition to whatever bits he already had.
> It's user-visible. Before we go anywhere with it, ignoring code issues, what
> UI should this have, assuming we do want this feature (I certianly see the
> OpenAFS-info mailing list