On a different look here, I don't think unit tests makes too much sense for windows since the ACL stuff is more complicated than the unix case and we don't necessarily know if the ACL behavior is different between different flavors of Windows. I would vote to have more functional tests here. Infact some similar functional tests exist in securable_resource.rb even though it is a little hard to understand.