> Did I miss the explanation of why Windows ACLs are so horrendous?
Maybe you've never had a big file system. Take this example:
Company with 900 employees, 40TB storage in about 40 departments, with a total of 100 million files.
Now you have a hierachical structure, each dept. has it's own dir, and below that you have other dirs shareable with other depts.
And then someone needs to set a new permission for a top-level dir. Both Unix and Windows ask to write those permissions to all files below that dir. If there are 10 million entries, the session will be blocked for a pretty long time.
Novells Netware didn't have that: Set a new permission, done within the second. I don't know how they stored permissions, but it never depended on the amount of data below that dir.
Also, in Unix and Windows there's a mix of permissions from a share and permissions to a file. In Netware you assigned a right, at that's it. Much easier to review.