https://unix.stackexchange.com/questions/206309/how-to-create-a-samba-share-that-is-writable-from-windows-without-777-permission
Anonymous
Separate policy from mechanism, separate interfaces from engines.