Re: [ACL] RFC 3744: Modifying ACEs

Apple's .Mac WebDAV server does something very similar.  However,  
protected ACEs are always protected and cannot be overridden by user  
ACEs.  We have a "third" class of ACEs that are inherited, but not  
protected.  While a client can see the effect due to ordering, there  
is no way to distinguish these ACEs without non-standard query  
extensions.

-Jake

JS "Jake" Baumgarten
Manager, iDisk Engineering
Apple, Inc.

On May 5, 2007, at 6:36 PM, Tim Olsen wrote:

> In the implementations we're working on here at Lime Wire, we always
> put the protected ACEs up front and the inherited ACEs last.  This way
> one cannot override a protected ACE - with the exception of protected
> ACEs that are inherited because they get grouped together with the
> inherited ACEs.
>
> -Tim
>