Topic: how avoid users move folders inside ibays

[Jáder]

Hi

I have users moving folders inside ibays by mistake.
I'd like to remove some permission and have users forbidden to move folders.
If I have a tree like:
ibay-root +
             +---dir1--------dir1-1
             +---dir2-------dir2-1
                    +--------dir2-1

users shouldn't be able to move dir2-1 to no other place (like inside dir1-1 or dir2-1).

My problem: I think this permission exist on Win2k3 (from where I moved them). Now users are moving the folders and management demand they don't be able to do so!
I'd wish to teach them... but for now I have to find out technological way to avoid them to move folders!

Thanks in advance.

Jáder

[CharlieBrady]

You can't. The same permission which allows users to create files also allows them to rename folders, or move the folders from one place to another.

You just need to train users not to move folders. Tell them not to do it. If they do it, reprimand or punish them. That's how things were done before computers were invented.

[Jáder]

Charlie,

Thanks by your tips.
I'd like to be sure the WINDOWS PEOPLE cannot prevent users to do it... just to be sure I'll not ear "I could do that on Windows 2003".
This is a BAD client... I may give them up for nothing... I'm reaching the limits of my patience!!

[janet]

jader

Did you search with google, there are many requests for this & many varying answers.
It will probably depend on the systems being used & how much effort & time you want to spend manually changing folder permissions etc, with limited or varying success.

IIRC the simplest thing to do was to change behaviour so that when drag & drop is used it asked for confirmation. That at least prompted the user if they really wanted to go proceed with their accidental or unintended folder move.

It is so easy to do if the mouse is slightly moved as the button is pressed, so a warning message gives the user a chance to cancel the move, without actually preventing them from moving it. Not an absolute blocker, but a workable practical answer.

[Stefano]

jader

you could take a look and study acl

HTH

[Stefano]

I would suggest you to enable ibay auditing too

[Jáder]

jader

you could take a look and study acl

HTH

I've been reading about thie SharedFolders Contrib.
It has solved many problems about ACL in the past BUT it slow down a lot the response time as perceived by user.
I think something on it is CPU intensive... and this server is running on LA >=1 most of time (it's a HP N40L for +40 users w/ lots of extra contribs !). So I'd like to avoid to use SharedFolder contrib.
I'll test other options... As posted by Janet there are other options.
I've seen one telling about to put sticky bit on dir with"chmod a+t DIR" but it appears to do not work.
I've seen one telling to put an RO anchor file owned by root.
Do not worked at all

any other ideas ? TIA

Jáder

[Stefano]

any other ideas ? TIA

as Charlie said, educate your users
use samba audit to discover who moves/edit files and folders
change/upgrade your server.. IMVHO, for 40 users you need something with more power

[purvis]

For windows, you can create a program that runs in a hidden dialog that checks the directory structure in a loop every so many seconds or minutes,  or have the program watch for changes to directories and then have the windows program check the directory listing.
IF any directories are not white listed in the program, place those in a windows box and unhide the dialog.
Have your windows not hide the dialog again until those changes are corrected.
You could run this kind of a program on the users computers as well on management windows.
After some irritating popup messages on the managements computers. That habit will probably soon end.