-- To make NEW files|drectores pick up the acl use -d
setfacl -Rdm 

-- remove all  ACL's
 setfacl -bn VALIBLA/

-- set rwx for user recursivly and for exiting files
 setfacl -R -m "u:its_jobs:rwx" VALIBLA/
 setfacl -R -m "u:sassrv:rwx" VALIBLA/
 setfacl -R -m "u:sas:rwx" VALIBLA/
-- g: from group

-- Make a defult group that is persenstant

setfacl -d -Rm g:saasi_jobs:rwx student_affairs



setfacl -Rm u:enemyuser:000 dirname

getfacl --access /BinghamtonUniversity
getfacl: Removing leading '/' from absolute path names
# file: BinghamtonUniversity
# owner: sas
# group: sas_all
user::rwx
group::rwx
other::r-x

[root@busas ~]# setfacl -Rm u:sassrv:rwx /BinghamtonUniversity
[root@busas ~]#  getfacl --access /BinghamtonUniversity
getfacl: Removing leading '/' from absolute path names
# file: BinghamtonUniversity
# owner: sas
# group: sas_all
user::rwx
user:sassrv:rwx
group::rwx
mask::rwx
other::r-x

[root@busas BinghamtonUniversity]# setfacl -Rm u:reg_jobs:rwx student_records
[root@busas BinghamtonUniversity]# getfacl --access student_records
# file: student_records
# owner: sas
# group: sas_sturec
user::rwx
user:reg_jobs:rwx
group::rwx
mask::rwx
other::---
# owner: mtrapani
# group: domain\040users
user::rwx
user:reg_jobs:rwx
group::rwx
mask::rwx
other::---


setfacl -d  -Rm group:sas_any:rwx,user:reg_jobs:rwx,user:sassrv:rwx,group:sas_sturec:rwx student_records/
setfacl -d -Rm u:mtrapani:x student_records/
setfacl -xm user:,user:sassrv,user:reg_jobs,group:sas_sturec   student_records/



[mtrapani@busas data]$pwd
/BinghamtonUniversity/student_records/data
[mtrapani@busas data]$ echo delme >> delme
[mtrapani@busas data]$ getfacl -a delme
# file: delme
# owner: mtrapani
# group: domain\040users
user::rw-
user:sas:rwx			#effective:rw-
user:sassrv:rwx			#effective:rw-
user:reg_jobs:rwx		#effective:rw-
user:mtrapani:--x		#effective:---
group::rwx			#effective:rw-
group:sas_any:rwx		#effective:rw-
group:sas_sturec:rwx		#effective:rw-
mask::rw-
other::r--