anchor.diff:                      case ShareId of
                           undefined when Client == ?USER_IN_SPACE_2_AUTH ->
                               % User belonging to the same space as owner of files
  -                            % shouldn't be able to get inherited json metadata or not set xattr
  +                            % shouldn't be able to get inherited json metadata, not set xattr
  +                            % or metadata set only on ancestor directories
                               % due to insufficient perms on Dir1. But can get all other xattrs
                               % as the first found value is returned and ancestors aren't
                               % traversed further (json metadata is exceptional since it
                               % collects all ancestors jsons and merges them)
  -                            case lists:member(?JSON_METADATA_KEY, XattrsToGet) orelse lists:member(NotSetXattrKey, XattrsToGet) of
  +                            ForbiddenKeysForUserInSpace2 = [?JSON_METADATA_KEY, ?XATTR_1_KEY, NotSetXattrKey],
  +                            case lists:any(fun(Key) -> lists:member(Key, XattrsToGet) end, ForbiddenKeysForUserInSpace2) of
                                   true ->
                                       throw(?ERROR_POSIX(?EACCES));
                                   false ->
  
positive.code:     ?CDMI_COMPLETION_STATUS_KEY,
      ?JSON_METADATA_KEY,
      ?RDF_METADATA_KEY,
      ?XATTR_KEY
  ]).
  
  -define(ALL_METADATA_SET_1, #{
  
negative.code:     ?CDMI_COMPLETION_STATUS_KEY => ?CDMI_COMPLETION_STATUS_2,
      ?JSON_METADATA_KEY => ?JSON_METADATA_5,
      ?RDF_METADATA_KEY => ?RDF_METADATA_2,
      ?XATTR_2_KEY => ?XATTR_2_VALUE
  }).
  
  
  