Abstract: Implementations described and claimed herein provide systems and methods for dynamically masking an access control list corresponding to a file system object in response to a change mode command. In one implementation, a change mode command for a file system object to change a first mode to a second mode is received. The first mode defines a first set of access rights and the second mode defines a second set of access rights. In response to the change mode command, a mask is dynamically applied to an access control list corresponding to the file system object. The access control list has zero or more access control entries defining access permissions for the file system object. The mask modifies any of the zero or more access control entries that have access permissions that exceed the second set of access rights defined by the second mode. The access control list is preserved.

Abstract: Implementations described and claimed herein provide systems and methods for resumable replication. In one implementation, an interruption in a transfer between a source and a target is identified. The transfer includes a send stream generated by the source and configured for receipt by the target. The send stream includes one or more snapshots of the source. A receive checkpoint generated by the target is received at the source. The receive checkpoint indicates data successfully received into the target during the transfer prior to the interruption. The transfer is resumed based on the received checkpoint. The resumed transfer skips any of the one or more snapshots and all data in a resumable snapshot already existing on the target. A complete transfer from the source to the target is verified using a chain of custody.

Abstract: Implementations described and claimed herein provide systems and methods for resumable replication. In one implementation, an interruption in a transfer between a source and a target is identified. The transfer includes a send stream generated by the source and configured for receipt by the target. The send stream includes one or more snapshots of the source. A receive checkpoint generated by the target is received at the source. The receive checkpoint indicates data successfully received into the target during the transfer prior to the interruption. The transfer is resumed based on the received checkpoint. The resumed transfer skips any of the one or more snapshots and all data in a resumable snapshot already existing on the target. A complete transfer from the source to the target is verified using a chain of custody.

Abstract: Implementations described and claimed herein provide systems and methods for dynamically masking an access control list corresponding to a file system object in response to a change mode command. In one implementation, a change mode command for a file system object to change a first mode to a second mode is received. The first mode defines a first set of access rights and the second mode defines a second set of access rights. In response to the change mode command, a mask is dynamically applied to an access control list corresponding to the file system object. The access control list has zero or more access control entries defining access permissions for the file system object. The mask modifies any of the zero or more access control entries that have access permissions that exceed the second set of access rights defined by the second mode. The access control list is preserved.