Users who do not have write access on a file should not be able to open files with share_deny set to OPEN4_SHARE_DENY_WRITE.

The test below is performed using a program which crafts packets in NFS4 protocol format and sends it to the NFS server. The credentials on the NFS packets set UID/GID to 1/1. The program attempts to open file /tmp/CID1 on the share to which the user doesnt have write access share with share_deny set to OPEN4_SHARE_DENY_WRITE. 

Reproducer:

Server:
[root@vm11 export]# uname -a
Linux vm11 2.6.9-89.5.ELsmp #1 SMP Mon Jul 6 22:02:51 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
[root@vm11 export]# cat /etc/exports
/export *(rw,insecure,fsid=0,no_root_squash) 

Client:
[root@vm22 ~]# uname -a
Linux vm22 2.6.18-156.el5.jtltest.78 #1 SMP Mon Jul 6 10:02:12 EDT 2009 x86_64 x86_64 x86_64 GNU/Linux
[root@vm22 ~]# mount -t nfs4 vm11:/ /mnt/
[root@vm22 ~]# cd /mnt
[root@vm22 mnt]# mkdir tmp; touch tmp/CID1;chmod 644 tmp/CID1
[root@vm22 mnt]# gcc -o open_share_deny_write open_share_deny_write.c 
[root@vm22 mnt]# ./open_share_deny_write vm11
 =============== FAIL =============================
trying to deny write permissions to others when 
don't have write permissions should return NFS4ERR_ACCESS
 instead got NFS4_OK.

Expected Results:
# ./open_share_deny_write vm22
 =============== PASS =============================
trying to deny write permissions to others when 
don't have write permissions return NFS4ERR_ACCESS.

This problem doesn't appear on RHEL 5.