can modify an ACL entry with read/write but not read only?

I do not understand this behavior:

     $ getfacl .
    # file: .
    # owner: a2bcm
    # group: pdt
    user::rwx
    user:a2bcm:rwx
    group::rwx
    group:teamleads:r-x
    mask::rwx
    other::r-x

     $ getfacl foo,v
    # file: foo,v
    # owner: scarey
    # group: quser
    user::r--
    user:a2bcm:rw-
    group::r--
    group:teamleads:r--
    mask::rw-
    other::r--

     $ s -u a2bcm setfacl -m u:a2bcm:r foo,v
    setfacl: foo,v: Operation not permitted

     $ s -u a2bcm setfacl -m u:a2bcm:rw foo,v

I cannot understand why it is permitted for me to set an ACL
for testuser2 which has read/write, but I cannot set one
that is a subset of those permission??? What am I missing?

How is it the access permisison calculated for who can set
what new or replaced ACL entries on a file?
_______________________________________________
acl-devel mailing list
[email protected]
http://acl.bestbits.at/mailman/listinfo/acl-devel