Should I be using Windows to change permissions ?

[AlcSi]

Hi,
I know the question is answered numerous times, in the official docs and in the sticky here.

The reason I ask is dual :

1. I don't understand the details of how ACL's work, and even less how they are translated between different versions (SMB <-> Windows / UNIX.... etc.). I get the feeling that I'm going to be making some changes one side and the other and end up with mismatches and the likes.
That being said, I think I'd be perfectly able to learn about 'facls' and use it exclusively to grant permissions.
Wouldn't that get me more consistent results ?

2. When changing permissions from my Windows client (Win8.1), the process is extremely slow. I took 4 hours to change them on a ~40Gb share with numerous "normal-sized" end-user files.
I'm thinking I'd just be skipping the network and any translation that is made between my Windows host and the FreeNAS by using facls and it will be more efficient.

tl;dr : is it really better to manage permissions from a Windows client or is it just more convenient for entry-level users ?
If it's the latter, I'd prefer sorting out the facls-version and managing everything from there as it would be a single and faster method in my opinion...

 

[anodos]

In 11.3 we're adding an ACL manager to the WebUI. There are some legacy design choices in 11.2 that impact ACL usability / intuitiveness. In 11.3 we're switching to setting nfs4:aclmode=simple, and vfs_ixnas. I also made some changes in 11.3 to hopefully speed up how quickly ACLs can be manipulated. Generally, doing these changes locally will be faster. You can use setfacl to set the ACL on a directory and then winacl -a clone -rv -p /mnt/path/to/folder to force that ACL to all files and subdirectories.