fs: Clarified documentation

changelog/unreleased/pull-5424

@@ -1,6 +1,6 @@
-Enhancement: Enable file system privileges before access
+Enhancement: Enable file system privileges on Windows before access
 
-Restic attempted to enable (Windows) file system privileges when
+Restic attempted to enable Windows file system privileges when
 reading or writing security descriptors - after potentially being wholly
 denied access to previous items. It also read file extended attributes without
 using the privilege, possibly missing them and producing errors.

internal/fs/priv_windows_test.go

@@ -50,6 +50,7 @@ func testGetRestrictedFilePath(t *testing.T) string {
 	test.OK(t, testfile.Close())
 
 	// Set restricted permissions.
+	// Deny file read/write/execute to "Everyone" (all accounts); allow delete to "Everyone".
 	sd, err := windows.SecurityDescriptorFromString("D:PAI(D;;FRFWFX;;;WD)(A;;SD;;;WD)")
 	test.OK(t, errors.Wrap(err, "failed to parse SDDL: %s"))
 	dacl, _, err := sd.DACL()