FYI for samba admins regarding minor change in SMB ACLs for 11.2

[anodos]

In the 11.1 branch we introduced a new parameter to zfsacl zfsacl:map_dacl_protected, which defaulted to False. Now it will default to True. The theory is simple. We set the DACL_PROTECTED (P) control flag on the returned SMB ACL if none of the ACES in the ZFS ACL are inherited. This fixes a windows UI issue where users were unable to remove inherited ACES and replace them with non-inherited ones. It's not really an issue for home users, but for those of us who are admins in an AD environment, it can be a big deal.