Re: [PATCH v2] ksmbd: grant a caller what its groups and OWNER RIGHTS ACEs allow

[Ian Bridges]

Hi Namjae,

You're right. For MAXIMUM_ALLOWED, v2 skips deny ACEs for the caller's
groups along with their allow ACEs. An owner named only by an OWNER
RIGHTS ACE then gets the rights of that ACE, write included, even when
a deny ACE for one of its groups comes first. A probe confirms your
example.

I'll send a v3 that processes those deny ACEs when this patch decides
the MAXIMUM_ALLOWED answer. Where the existing lookup decides, group
ACEs stay ignored for every request, as before this patch.

Thanks,
Ian