Permission script should check ACLs and set accordingly.

[finalhow]

We are finding some situations where permissions aren't working because the FACLs are not set properly.

In particular some sites/default/files directories groups and default groups are missing 'w':

# file: files/
# owner: cibuild
# group: apache
user::rwx
user:cibuild:rwx
group::r-x
mask::rwx
other::---
default:user::rwx
default:user:cibuild:rwx
default:group::r-x
default:mask::rwx
default:other::r-x

A manual intervention as follows fixes the issue:

setfacl -R -m d:g::rwx ./files
setfacl -R -m g::rwx ./files