ACL vs Posix in OsX

[Spinal]

A question I need some clarity on...

Lets say I have a folder, and set the permissions to :

ACL
UserName:ALLOW:Write Only

Posix
UserName:Read Only
SomeGroup:None
Others:None

UserName is the same use in both... does the user now get only write, as ACLs get processed first, or does it then proceed to process POSIX as well, and give the user read/write?

M.

 

[agatward]

ACL is supposed to override POSIX, but may require a server restart or FS cache flush (sudo dsmemberutil flushcache) for this to take effect.

 

[Spinal]

It was more theoretical (studying for an exam)

I ended up finding this "equation":
Effective Permissions = POSIX + ACL Allow - ACL Deny

which works quite well

M.