DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; q=dns; s=default; b=BWVdB
	h9tgkXW8iui1zeIGflWQb6NiIWFXu8Jl3nPrMw+Wt8TaWnDwrgsuGd4JBq5omxdr
	3JkuLXWd9f6pRZuMV+nfdGRTyKbNPG7y0Zca1Rx8gQ9vlaUSmryrxVZf80LnRjBs
	bAeJCV390Bby2LHPnCTxyV0J8C61+Vy3k/ZZ2I=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
From: Achim Gratz <Stromeko@nexgo.de>
To: cygwin@cygwin.com
Subject: Re: [TESTERS needed] New POSIX permission handling
References: <20150410100703.GA4401@calimero.vinschen.de>	<87lhhzcarc.fsf@Rainer.invalid> <5528E2ED.7090105@gmail.com>
Date: Sat, 11 Apr 2015 11:08:46 +0200
In-Reply-To: <5528E2ED.7090105@gmail.com> (David Macek's message of "Sat, 11	Apr 2015 11:01:33 +0200")
Message-ID: <87d23bc9r5.fsf@Rainer.invalid>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain

David Macek writes:
> Power Users don't have access to (almost) everything, like
> Administrators do. The Domain Administrators group is a member of
> Administrators, so unless I'm missing something, there's no reason to
> have them explicitely in the DACL.

That doesn't stop folks from using them in DACL entries and membership
of one group in another (rightly) doesn't confer transitive access
rights.  I've just named these two examples because I've seen them
before in ACL, I make no claim as to whether that's a sensible thing to
do or not.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Wavetables for the Terratec KOMPLEXER:
http://Synth.Stromeko.net/Downloads.html#KomplexerWaves

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple