- Joined
- Mar 6, 2014
- Messages
- 9,553
In the 11.1 branch we introduced a new parameter to zfsacl zfsacl:map_dacl_protected, which defaulted to False. Now it will default to True. The theory is simple. We set the DACL_PROTECTED (P) control flag on the returned SMB ACL if none of the ACES in the ZFS ACL are inherited. This fixes a windows UI issue where users were unable to remove inherited ACES and replace them with non-inherited ones. It's not really an issue for home users, but for those of us who are admins in an AD environment, it can be a big deal.