POSIX->NFSv4 Mapping
Input POSIX ACL
user : :rw-
user :marius:rw-
group: :rw-
group:staff :rw-
group:users :rw-
mask : :rw-
other: :r--
Output NFSv4 ACL
user : :rw- ALLOW: : OWNER@ :rwatTcCy
DENY : : OWNER@ :x
user :marius:rw- DENY : : marius@citi.umich.edu:xTC
ALLOW: : marius@citi.umich.edu:rwatcy
DENY : : marius@citi.umich.edu:xTC
group: :rw- DENY :g: GROUP@ :xTC
ALLOW:g: GROUP@ :rwatcy
group:staff :rw- DENY :g: staff@citi.umich.edu:xTC
ALLOW:g: staff@citi.umich.edu:rwatcy
group:users :rw- DENY :g: users@citi.umich.edu:xTC
ALLOW:g: users@citi.umich.edu:rwatcy
DENY :g: GROUP@ :xTC
DENY :g: staff@citi.umich.edu:xTC
DENY :g: users@citi.umich.edu:xTC
mask : :rw-
other: :r-- ALLOW: :EVERYONE@ :rtcy
DENY : :EVERYONE@ :waxTC
But wait, it gets worse