[DLS][Network Drive] Document is visible if Group has GRANT access but user has an explicit DENY

[praveen-kukreja]

Bug Description

Steps to Reproduce:

A group A has been provided read/write access to a file in Windows Network Drive but a given user user1 of that group A has an explicit DENY permissions for a document.

Expected Behaviour:

In that case the document is not accessible to user1 in the source (network drive) since in Windows explicit deny ACEs are evaluated before any explicit allowed ACEs. Reference: https://learn.microsoft.com/en-us/windows/win32/secauthz/dacls-and-aces

Actual Results:

The document is visible in the search applications to the user.

Environment

Windows Network Drive

[praveen-kukreja]

I've found a possible resolution for the fix, implementation is in-progress

[rodmacedo1]

Hi @praveen-elastic this is the same for #1966?

[praveen-kukreja]

Hi @rodmacedo1, yes I'll raise a common PR for both the issues.

[seanstory]

Based on #2875 (comment), it seems that this issue is not fixed after all. Reopening.