Treat extended attributes with separate permission from files. Example: Let A write its own metadata to B's file, even if A has read-only access. B can't see A's metadata.
Make it a policy option to delete metadata when a file is deleted (or keep it around).
Treat extended attributes with separate permission from files. Example: Let A write its own metadata to B's file, even if A has read-only access. B can't see A's metadata.
Make it a policy option to delete metadata when a file is deleted (or keep it around).