🚀 go-pugleaf

Is it possible to prevent a user from being able to
change the protection on a directory that he owns?

E.G. We have USER$DISK:[000000]USER1.DIR with S:RWE,O:RWE,G:RE,W:RE
And what I want to -prevent- the user from changing
his directory to say W:RWE which he might do to allow other users
to copy files into his directory for him.

  We want to prevent that because we don't want users to come running
  to us when they suddenly have files in their directory that the
  cannot delete.

One partial solution is:

  $ SET ACL/ACL=(IDENT=*,ACCESS=READ+EXECUTE) USER$DISK:[000000]USER1.DIR

It doesnt prevent the user from changing the UIC protection of his
directory, but it does prevent IDENT=* from being able to WRITE into
the directory anyway. 

Until the USER1 in question figures out how to SET ACL himself.
By which time he should know better.