Confusion About ACL

[asifmcp]

I am totally confused with DSS ACL. When I allow to user1 RWX on share TEST, it works fine. Then I allow to User2 R on share TEST, it faces access deny. As I understand user has only 2 conditions, RWX or access deny.

I want following on share TEST:

User1: RWX
User2: R_ _

Please guide me step-by-step configuration.

[Gr-R]

Example 1.
User1 has read access permissions for directory A only and does not have access permissions for subdirectory B at all.
A User1 r-x
B User1 ---
Example 2.
User1 has access permission only for reading for directory A. Can enter sub directory B, but no files are visible.
A User1 r-x
B User1 --x
Example 3.
User1 can enter the subdirectory C and can read and write files within that subdirectory.
A User1 r-x
B User1 --x
C User1 rwx