Yes, we need to proceed to handle ACLs with no user or group specifier 
unless they are access ACLs (since those entries would be covered by the 
mode parameter on the <Path> element rather than by ACL entries.

This is a change to old behaviour which explicitly wouldn't handle an 
ACL with no user or group (such as a default:user::rwx ACL)

The mask ACL is another special case which we don't want to handle.

On 04/02/14 15:32, Chris St. Pierre wrote:
> In src/lib/Bcfg2/Client/Tools/POSIX/base.py:
>
>>                  if acl.tag_type == posix1e.ACL_USER:
>>                      qual = pwd.getpwuid(acl.qualifier)[0]
>>                  elif acl.tag_type == posix1e.ACL_GROUP:
>>                      qual = grp.getgrgid(acl.qualifier)[0]
>> -                else:
>
> Previously, this caught all other cases not handled in the first two
> if/elifs and returned. Now it only catches two specific scenarios. Are
> there cases where this code would have returned before, but will not
> now? Is that intended?
>
> —
> Reply to this email directly or view it on GitHub
> <https://github.com/Bcfg2/bcfg2/pull/156/files#r9424171>.
>