POSIX->NFSv4 Mapping

Input POSIX ACL

user :      :rw-
user :marius:rw-
group:      :rw-
group:staff :rw-
group:users :rw-
mask :      :rw-
other:      :r--

Output NFSv4 ACL

user :      :rw-      ALLOW: :   OWNER@              :rwatTcCy
                      DENY : :   OWNER@              :x
user :marius:rw-      DENY : :  marius@citi.umich.edu:xTC
                      ALLOW: :  marius@citi.umich.edu:rwatcy
                      DENY : :  marius@citi.umich.edu:xTC
group:      :rw-      DENY :g:   GROUP@              :xTC
                      ALLOW:g:   GROUP@              :rwatcy
group:staff :rw-      DENY :g:   staff@citi.umich.edu:xTC
                      ALLOW:g:   staff@citi.umich.edu:rwatcy
group:users :rw-      DENY :g:   users@citi.umich.edu:xTC
                      ALLOW:g:   users@citi.umich.edu:rwatcy
                      DENY :g:   GROUP@              :xTC
                      DENY :g:   staff@citi.umich.edu:xTC
                      DENY :g:   users@citi.umich.edu:xTC
mask :      :rw-
other:      :r--      ALLOW: :EVERYONE@              :rtcy
                      DENY : :EVERYONE@              :waxTC
But wait, it gets worse