doxify handle.c

Reformat initial comment to make it useful to doxygen too.

Signed-off-by: Marcus Watts <mdw@linuxbox.com>
Add doxygen-compat headers to newly added vfs acl logic.

Since these functions are all static,
they might not be visible to doxygen.

Signed-off-by: Marcus Watts <mdw@linuxbox.com>
VFS acls: rewrite to serialize acls using xdr.

Xdr provides a machine-independent way to encode
data.  This is desirable in case the underlying filesystem
might be transplanted between machine architectures.

Signed-off-by: Marcus Watts <mdw@linuxbox.com>
vfs_default_acl - remove unused parameter "fd"

Signed-off-by: Marcus Watts <mdw@linuxbox.com>
Clean up various comments to make them more doxygen friendly.

Signed-off-by: Marcus Watts <mdw@linuxbox.com>
fsal_check_access_acl - default to anyone read_acl, owner write_owner.

If no explicit deny, default to allowing
        anyone  read_acl
        owner   write_owner
This is consistent with Unix standards for file
ownership & permissions checking, and somewhat consistent
with RFC 5661 6.2.1 "unsupported permission bits" which
may allow access unless there is a specific DENY rule.

It also means that vfs_default_acl can construct
simpler acls, because it doesn't have to explicitly
allow for these cases.

Signed-off-by: Marcus Watts <mdw@linuxbox.com>
vfs_compute_perm - don't do anything with read|write acl, write_owner.

The logic in fsal_check_access_acl always allows the
owner to read|write acls, so there's no need
to code this in the acl.  I just added logic there
to default to anyone read_acl, owner write_owner,
so again there's no need to code that here either.

Signed-off-by: Marcus Watts <mdw@linuxbox.com>