HP CIFS Server 3.0i Administrator's Guide version A.02.03.03

POSIX Default Owner and Owning Group ACLs
With HP CIFS Server version A.01.10, the POSIX default owner and default owning group ACEs
are shown in the Windows interface as Creator Owner and Creator Group.
The HP CIFS Server versions A.01.09 and below, only one ACE each for owner, owning group
and everyone is shown if the permissions are the same on corresponding access and default
ACEs.
With HP CIFS Server version A.01.10, the POSIX default owner and default owning group ACEs
are shown in the Windows interface as Creator Owner and Creator Group even if the
permissions on the access and default ACEs are the same. However, everyone is shown as only
one ACE if the access and default permissions are the same.
Changing permissions on Windows Creator Owner and Creator Group ACEs will only
modify POSIX default owner and owning group ACEs on the HP CIFS Server.
POSIX ACEs with zero permissions
POSIX owning group and everyone ACEs with zeros permissions are not displayed in the
Windows interface. For example, if a directory owning group has zero permissions on the HP
CIFS Server, an ACE for that owning group will not be shown on the Windows interface. ACEs
for any other user or group with zero permissions are shown with no permissions in the Windows
interface.
POSIX ACEs with zero permission can be modified by adding an ACE and setting the desired
permissions for that user or group. A new ACE can be added by using the Add button on the
Windows ACL interface.
In Conclusion
Samba ACL support is a feature that enables the manipulation of UNIX file permissions or UNIX
ACLs from Windows NT/XP/2000 clients.
With this feature, almost any modification you want to make to UNIX permissions or VxFS
POSIX ACLs can now be done from an NT/XP/2000 client (with the exception of the class entry
for VxFS POSIX ACLs).
Windows applications running on the Windows NT/XP/2000 client cannot expect full NT/XP/2000
ACL support. Although much of the NT/XP/2000 ACL information is retained and retrieved by
the Samba server, some of the information may be lost or changed in some cases.
The ACL support is not an NT/XP/2000 ACL emulation, but rather access to UNIX ACLs through
the NT/XP/2000 client. Therefore you cannot run Windows applications which require full, perfect
NT/XP/2000 ACL support.
56 Managing HP-UX File Access Permissions from Windows NT/XP/2000