So have an issue with our our Unix admins, instead of fixing a problem, they want to continue to rum chmod and change permissions to 755/777 whenever someone can't access a Directory/File.  The problem is that in this zone has both Unix LDAP and Windows Active Directory authentication provider on a zone as it is shared between unix hosts and windows hosts.   The issue being that when everyone else is given permission, it is also giving domain users access via the mapper.   Thus opening the data up to pretty much everyone in the environment.   

I can not really find any good documentation or am not searching for the correct information, so any help would be appreciated and yes I know I can disable chmod, but in my environment that is not an option.