Apple's .Mac WebDAV server does something very similar.
However,
protected ACEs are always protected and cannot be overridden
by user
ACEs. We have a "third" class of ACEs that are
inherited, but not
protected. While a client can see the effect due to
ordering, there
is no way to distinguish these ACEs without non-standard
query
extensions.
-Jake
JS "Jake" Baumgarten
Manager, iDisk Engineering
Apple, Inc.
On May 5, 2007, at 6:36 PM, Tim Olsen wrote:
> In the implementations we're working on here at Lime
Wire, we always
> put the protected ACEs up front and the inherited ACEs
last. This way
> one cannot override a protected ACE - with the
exception of protected
> ACEs that are inherited because they get grouped
together with the
> inherited ACEs.
>
> -Tim
>
|
