How set nfsv4 acl to DENY "Convert inherited permissions into explicit permissions on this object"

TrueNAS General
,
1

"I’m using TrueNAS SCALE 24.10. I need to configure Samba with two users:

  1. Upload User: Can upload files but cannot modify/delete existing content.
  2. Admin User: Has full read-write privileges.

However, after implementing DENY ACL rules, Windows clients can still bypass restrictions by using “Convert inherited permissions into explicit permissions on this object”. This allows users to arbitrarily modify permissions. How can I prevent this client-side operation?"