NetApp provided some kind of workaround but displayed access rights are always only rough approximation. Is there any Unix tool that can read native NTFS ACLs? (SecureShare can read Unix rwx from Windows hosts however it cannot be scripted...) It will solve the customer's problem for ever (NetApp can always change the way of approximation in future releases...)
I don't know about "Unix", but as far as I am aware there is no (standard) way to use ACLs over NFSv3. When Solaris added ACLs to NFS, they used private extentions. v4 should (eventually) change that.
Smbclient would seem to be the tool to use so you could query the CIFS side of things, but I don't think it has any method of explicitly displaying ACLs.