X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; q=dns; s=default; b=BWVdB h9tgkXW8iui1zeIGflWQb6NiIWFXu8Jl3nPrMw+Wt8TaWnDwrgsuGd4JBq5omxdr 3JkuLXWd9f6pRZuMV+nfdGRTyKbNPG7y0Zca1Rx8gQ9vlaUSmryrxVZf80LnRjBs bAeJCV390Bby2LHPnCTxyV0J8C61+Vy3k/ZZ2I= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:references:date:in-reply-to :message-id:mime-version:content-type; s=default; bh=gHr81N9VJP2 F7EGdXX3MFeS9mBA=; b=aaBzMKpYwR4ovoopuY5HGZzijALUg56CZ9wahcXI7Cx NgAHinSw9EAKfP4lfno66o6Y34MOkguJ/tDk0+ynbB9fDNw0pDwBvYxGFYJLQ9ef +NJFeHRvhuFY325bHhdflWnDDtX8F2t2GCnvlqmwbJtbHyp02qh4iLbp1DJaFJTI = Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.7 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=ham version=3.3.2 X-HELO: mail-in-11.arcor-online.net X-DKIM: Sendmail DKIM Filter v2.8.2 mail-in-04.arcor-online.net 3lP9PC0WDcz5DSM From: Achim Gratz To: cygwin AT cygwin DOT com Subject: Re: [TESTERS needed] New POSIX permission handling References: <20150410100703 DOT GA4401 AT calimero DOT vinschen DOT de> <87lhhzcarc DOT fsf AT Rainer DOT invalid> <5528E2ED DOT 7090105 AT gmail DOT com> Date: Sat, 11 Apr 2015 11:08:46 +0200 In-Reply-To: <5528E2ED.7090105@gmail.com> (David Macek's message of "Sat, 11 Apr 2015 11:01:33 +0200") Message-ID: <87d23bc9r5.fsf@Rainer.invalid> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain David Macek writes: > Power Users don't have access to (almost) everything, like > Administrators do. The Domain Administrators group is a member of > Administrators, so unless I'm missing something, there's no reason to > have them explicitely in the DACL. That doesn't stop folks from using them in DACL entries and membership of one group in another (rightly) doesn't confer transitive access rights. I've just named these two examples because I've seen them before in ACL, I make no claim as to whether that's a sensible thing to do or not. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ Wavetables for the Terratec KOMPLEXER: http://Synth.Stromeko.net/Downloads.html#KomplexerWaves -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple