search for: rwxd

...to a file or directory, they have created, can change the access for a user\group who would normally have "Read" access to "Write" and my security model is broken. This "Write" access is actually "Full Control" in NT terms as, from what I understand, just rwxd (Change) access can not be mapped correctly on to the XFS POSIX ACL. Is this how Samba should function or have I just mis-configured my server? If this is how Samba functions currently then is this being looked at with a view to adding control of the changing of permissions for all groups\users...