Why attempt to map Windows to POSIX ACLs in Samba ?

• Windows administrators are used to GUI ACL controls, Samba must support these.

• The Samba mapping of UNIX user/group/world triple is not considered enough granularity for Windows permissions.

• Competing SMB implementations implement Windows ACLs.

• • It becomes a 'check box' feature, no matter how much it is used.

• Fits with Samba philosophy of allowing OS to control access, less user-space security policy.