One limitation of the current handling of Posix ACLs in the Shared Folder page is the “Reset permissions” action.
If there were some special permissions set by a Windows network client through Samba, “Reset permissions” clears them. Only default permissions and settings from ACL tab are retained.
I was wondering if we could add a new feature consisting of
a new button, Take ACL snapshot, that stores the actual Posix ACL into a file (by running getfacl?)
restoring Posix ACLs from the snapshot file during “Reset permissions”
The benefit of this new feature is: the admin can shape the permissions at his desire.
“Reset permissions” is needed when the user screws up ACLs from Windows interface.
It should always reset permission on a clean and consistent state.
I like the snapshot feature, but I bet 90% of the sysadmin will forget to take a snapshot when needed
Maybe we can simply document how to do it from the shell.