I started using posix ACL and one thing I've noticed is that the directories are overridding any permissions I set on individual files. For example /shared gives the user rwx rights, however inside the folder I set the file to only give the user rx permission. They were still able to delete it. I've tried a couple methods for this including giving the user rx permission to the parent but rwx permission on the file and this wouldn't let them delete. I tried setting permissions on the group for access to the file but specific user ACLs on the inividual files but no matter what I do this is using the parents ACL. Is there some way to ignore the parent permissions or at least use the ones on the file. I haven't seen any articles that address this.

If you're going to describe problems with using POSIX ACL please post getfacl output for dirs/files you talk about. Easier to read.

I've been working with Posix ACL and the problem I'm having is that any files in a directory are inheriting the parent folder's ACL and ignoring the ACL I set specifically on it. For example say I have a user named geneanthony and I want him to have read/write/execute permission on the parent directory. I set it as so:

setfacl -m u:geneanthony:rwx foldername

When I getfacl on the folder I get:

file: foldername
owner: root
group: root
user:: rwx
user: geneanthony:rwx
group:: r--
mask:: rwx
other:: r--

Now the default permissions on the file should give me read/write/execute permissions.

Now I create a file called testfile and I once again change the permission but this time I set it to give geneanthony only read permission.

setfacl -m u:geneanthony:r testfile

When I getfacl on the testfile I get:

file: testfile
owner: root
group: root
user:: rwx
user: geneanthony:r--
group:: r--
mask:: r--
other:: r--

For all intensive purposes I should only have read access to the file. However I can remove it. The same works the other way where if I set the parent folder rx only and the file rwx I can't delete the file. No matter what I set on the file it's using the parent. How can I set it up so the file is using it's own permission and not the parents?

//Moderator.note: since you made two threads for the same subject I've merged them.