We have a hard to reproduce issue with some of our macOS Clients using smb2 and smb3.
Users can edit and create files then all of a sudden, the lose the right to a certain directory or file. It's the "all of a sudden" part that makes it difficult to debug.
However, I noticed that turning of ntfs streams on the client seems to resolve this issue - at least for now. Searching around I found this article mentioning streams: Q&A: Samba’s named streams – The Eclectic Light Company
Does anyone else have an issue with macOS clients behaving better when streams are turned off?