pub fn windows_operator_read_args(dir: &str) -> Vec<String>Expand description
The icacls argv that grants BUILTIN\Users a read+execute ACE, inheritable to child files/dirs,
on dir (#728). By SID so it is locale-independent; /grant:r ADDS the ACE without replacing the
DACL, so the inherited {SYSTEM,Admins} full-control from #715 (if any survives) stays intact.
Pure, so the exact grant is unit-tested without touching the filesystem.