when unix permissions give false sense of security

Hi,

I have an issue where users under unix when looking at file permissions cannot see the windows ACLs, so get a false sense of security of file.

There are two options I believe

1. ssh to isilon and run ls -led

2. call REST API and call api_instance.get_acl

are these valid options, or is there a third way ?

is ssh more performant than REST before we start going down either path