Allow access only to a share's folder

[maxxer]

I know it's more a Samba/ACL problem... I have a share accessible to a group of users, I'd like to add an user not in the group access to a single folder of this share.

I added the user as RO to the share (which has ACL enabled), then in the share permissions I granted only traverse for this folder only, and in the designated share I then gave full permission to the user.
As a result the user is able to browse, RO, all the share and is not able to write in the selected dir.

Is this the corrected approach?


I even tried to create a new share dedicated to this user and make a filesystem link to the folder but it's not visible, in file explorer nor via share browse.

thanks