Uh oh. Not so fast. I uncovered a bug in DUMPSEC that SystemTools says is as-is due to the fact they bought the product from an acquisition and are not planning to update it anytime soon.

The problem is that it combines inherited NTFS rights with explicit share rights with producing the report for a given share. This is totally incorrect. They referred me to SmallWonders software to see if their (similar) products do better at producing an accurate share-permissions report.
_________________________
silence is golden, but duct tape is silver