11.3 ACL Management explain root wheel owner@ group@

[RiBeneke]

I have just upgraded to 11.3 and the new features are very welcome. Thank you iX !
In the new ACL Management (Sharing / Windows Shares (SMB) / <Select Share ... Edit ACL> panel
can someone please educate me on the meaning of root wheel owner@ and group@ ?
The User Guide does not help me here.
I assume that on the left under File Information that root and wheel refer to the built in user and group and should normally not be changed.
On the right under Access Control List, are the settings for owner@ the settings that will apply to root ?
And are the settings for group@ the ones that will apply to wheel ?
Or do owner@ and group@ have some other meaning ? Thanks.

 

[anodos]

In the screen you are looking at "root" is the Owner of the dataset, "wheel" is the Owner-Group of the dataset.

owner@ entries affect permissions for the Owner of a file. It's a special designator per NFSv4 RFC.
group@ entries affect permissions for the Owner-Group. Ditto regarding RFC.

So right now, root and wheel have full control. If you were to chown the file to "bob:users", bob and users would have full control without having to make changes to the actual ACL. It works like S-1-3-0 (CREATOR-OWNER) in the windows world.

 

[RiBeneke]

Thank you for the clarification.
So under File Information on left side the User is Owner-User and the Group is Owner-Group.
Under Who on right side the Owner@ designator for Owner-User is logical, but I could not find an online reference to confirm it.
I have since reread the help ? note and see that the Owner@ designator is explained there. Apologies.

 

[anodos]

Thank you for the clarification.
So under File Information on left side the User is Owner-User and the Group is Owner-Group.
Under Who on right side the Owner@ designator for Owner-User is logical, but I could not find an online reference to confirm it.
I have since reread the help ? note and see that the Owner@ designator is explained there. Apologies.

No problem. These things can seem a bit overwhelming on first exposure. Most of the ACL is defined in RFC3530 https://tools.ietf.org/html/rfc3530#page-50