That looks like a duplicate of bug #69834.

Yes, except that I'm not using the Windows Offline Files feature. It could easily be a manifestation of the same bug though if both bugs are Windows ACL-related.

Thanks for the report. I was hunting this bug earlier, however it didn't come to a distinct solution. It still looks to me, this ticket is a duplicate of bug #68926, so still either Samba or a config issue. Probably hard to say, without having some debug session, and creating a reproduce environment is probably the most tricky part. 

Thanks.

I'm putting my money on this being the same underlying bug as #68926, and the line from the bug report:

>The issue here is that unmapped unix user accounts are mapped to built-in windows SIDs, which are obviously have nothing to do with windows ACLs. 

...is in effect in my setup as well and I think it's the core of the problem: I have not joined the AD, but provided my credentials only when connecting the drive.

The code which compares access rights to SIDs cannot get several of the SIDs resolved on a host which is not an AD member - and never will.

A couple if years ago when I was programming an IIS/C#/ASP intranet application and was faced with the same problem of showing only files readable by the logged in user (or rather the IIS impersonated one) and needed an is_readable() equivalent in C#. I ditched calling all the built in ACL check functions and just opened the file for reading without doing anything. eg, the PHP equivalent of:

function is_readable(string $file_in): bool
{
   try {
     if(is_resource($handle=fopen($file_in, "r")))
     {
        fclose($handle);
        return true;
     }
     return false;
   }
   catch(Exception $ex)
   {
      return false;
   }
}

I predicted the worst performance wise and expected the logs being full of rejected read attempts, but the code was snappy even with thousands of files in the remote directory and nothing was logged. A simple solution to a tricky problem I guess, but I have no idea if this could be the solution to this bug too. My C/C++ is far too rusty...