> On Apr 24, 2018, at 10:28 AM, Michael Ströder <michael@stroeder.com> wrote: > > Ah, forgot to make that more clear (and people tend to miss that point): > > Æ-DIR's ACLs are _static_ and work their way through the actual data > which is changed to alter the effective access rights. +1 to static ACL’s to guard the directory and storing the access lists as data instead.