Koozali.org: home of the SME Server

Permissions problem - users cannot change file attributes in Windows

Offline CraigZA

  • *
  • 5
  • +0/-0
Hey folks, testing out an SME8 box with the SharedFolders contrib installed, I have created my groups, assigned my users to the respective groups, and created my "shared folders" and assigned specific groups read&write/read permission as management requested.

After transferring most of the data across from the old server using a user account to map drives on the old server and new SME box, I noticed that this particular user is granted "owner" permission on everything under the root of the "shared folder" (not to mention his particular quota has skyrocketed).

So I have for example:

P:\ mapped as \\servername\public (share I created) and everything under \\servername\public\*.* has this user as "owner" permission.  The group he is in has correct "read & write" permission, and they can create/edit/delete files in the \\servername\public share.

What the remainder of the users in the group cannot do is change attributes on files in this share that other users create, so they cannot mark/unmark files as read-only.

Is there any way to set the "owner" of all the files in the share to the group rather than user, and have any files copied/created in the share inherit the "owner" attribute?  So that all group users have equal rights to files in this share?

Thanks,
Craig.

PS: My server is running as a workgroup mode, not PDC.

Offline CraigZA

  • *
  • 5
  • +0/-0
Re: Permissions problem - users cannot change file attributes in Windows
« Reply #1 on: July 25, 2011, 10:25:41 PM »
Okay, so I've fiddled and found out that adding...

create mask = 744
directory mask = 755
force user = root
force group = staff

...to the share section in smb.conf gives me what I'm looking for, with the staff group having "Full Control" under Windows, the owner on the share and all files under it being "root".  Staff group members can then set file attributes, create/delete/rename files, etc etc.

I'm pretty sure this isn't the right way around doing it, especially with the use of acl and SharedFolders contrib, and I doubt it will survive a reboot/update.

Look forward to anyone's thoughts/advice/assistance :)
« Last Edit: July 25, 2011, 10:27:14 PM by CraigZA »