NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled. We're excited to launch our new Community experience on July 30 and more information will follow soon. Stay connected during the transition - Join our Discord community today.
I would set the the share level ACL such that everyone has read access. CIFS should respect the most restrictive permissions so any file that was writable by the WAFL permission bits (in this case UNIX permission bits) should be over-ridden by the share-level ACL.