ACls accidentally reset - help to restore

[gwaitsi]

I have photos share which worked perfectly, but i accidentally trashed the dataset permissions after the bluefin update and now I can get it to work again.

dataset: photos (and smbshare)

photos/user1
photos/user2
photos/shared/user1
photos/shared/user2

user1 should have full access within photos/user1
user1 should not see the contents of photos/user2
user1 should have full access within photos/shared/user1
user1 should have read only within photos/shared/user2 (and be able to see all user folders)

Currently
- user1 can create/delete folders/files in photos
- user1 can view all folders/files
- user1 cannot create/delete in photos/user1 or photos/shared/user1

current dataset permissions are;
@owner:me Full Control
@group:me Read
@group:smbusers Modify
@group:smbusers Read
User:me Full

share permissions are;
SID: S-1-1-0
name: Everyone
Permission: Full
Type: Allowed

 

[anodos]

Did you take a snapshot recently (before you made the changes)?

 

[gwaitsi]

Did you take a snapshot recently (before you made the changes)?

no, was too long ago. I created sub datasets for each user and sorted their individual access, but what the users see is;

photos/user1 (files) - r/w
photos/user2 (empty)
photos/shared

i don't want user1 to even see the user2 folder name for the private folders

 

[gwaitsi]

I almost got it back to where i had it, but still have two problems;

user1 and 2 have full access to their own photos directories
user1 and 2 can see all shared user folders
user 1 and 2 can create files and directories under their own shared folders

Problems:
1) users see an empty folder for each other user under photos.
desired behaviour: I would rather they only see their own folder and the shared folder
2) users can't delete folders they create under shared/user but they can delete their files
desired behaviour: should only be able to write new files / directories, but should not be able to delete either files or directories under shared

photos/user1 (files) - r/w
photos/user2 (empty)
photos/shared
photos/shared/user1
photos/shared/user2