In order to view permissions on a directory, you can issue the <code>fs la ''/afs/path/to/directory''</code>. All users are part of the <code>system:anyuser</code> group, and all users who have authenticated with your Kerberos server are part of the <code>system:authuser</code> group.