I'm using FreeBSD and ZFS (I think FreeNAS uses NFSv4 ACLs).
I want to grant access to a group of users (group name:
publicfiles_rw_users) and allow them to modify, create, and delete all files and dirs within/below a directory (path:
/mnt/mydata/files/publicfiles/pub), but not let them delete/rename/move the
/mnt/mydata/user/publicfiles/pub directory itself, and they can't change/modify ACLs on anything (all permissions are inherited without exception).
Of course other groups will also have access, but it's the ACLs I need to manage this group, which I'm unclear about.
As background, almost everything below
/mnt/mydata/user inherits ACLs from that directory, so I can see that it will need an additional ACL entry added on
pub. I'm not sure if I can simply allow all other ACLs to continue inheriting as before, or what else I have to do.
What is the cleanest way to do this, with