3.1 WebDAV Client Details
The security descriptor property that the WebDAV client retrieves from the WebDAV server can contain more information than what is required of the client to set it. Section 2.2.2 specifies that the client does not need to set the entire security descriptor to modify the DACL. Additionally, the security descriptor property can contain multiple security principal identifiers for the NT_Sid type, as specified in section 2.2.17.
The client can generate all of the security principal identifiers when sending the security descriptor property to the server. It is recommended that the client generate the most precise identifier, as specified in section 2.2.17, to avoid ambiguous identifiers.