Hiding dataset when parent set to "read" ACL

Hello, I have a problem with permissions and the visibility of nested datasets. I have a MainSMB share at the top level with projects inside it. I want to give access to each project only to specific users. Normally, I would create a share for every project and use traverse permissions in the ACL for MainSMB. However, this changes the path to the share, showing it as \\Truenas\project_name instead of \\Truenas\MainSMB\project_name.

To avoid this, I need to give read permissions for the MainSMB share, but this allows all users to see every project (and even everything inside each project). Is it possible to hide projects (each project being its own dataset) from everyone except a specific list of users, even if the parent dataset is set to read?

Yes, if you don’t share the top level dataset.

Otherwise, you’ll need someone more expert than me.