Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: byte on July 02, 2009, 06:16:08 PM

Title: How do you deal with sub level folder access ?
Post by: byte on July 02, 2009, 06:16:08 PM
Hi all!

General question for you all, how do you deal with sub level folder permissions with samba? For example we can set the top level directory which inherits the permissions to the sub level folders, but I'm thinking I'd like to set top level then individually set the subfolders with its own custom permissions.

So if we have an example:

Top level
Documents (Everyone permissions)

Sub levels
Joe (joe read/write)
John (John read/write)

So then John cannot access Joe and vice vesa.  Does anyone do this already ?

Title: Re: How do you deal with sub level folder access ?
Post by: Daniel B. on July 02, 2009, 07:37:15 PM
Hi.
In order to set more flexible permissions on samba shares, I've developed the contrib shared folders (http://wiki.contribs.org/SharedFolders). It does not let you configure different permissions for sub-folders, but lets you configure read only or read/write for any group of user. Maybe it can help you.

Cheers, Daniel
Title: Re: How do you deal with sub level folder access ?
Post by: Stefano on July 02, 2009, 09:03:08 PM
if you use the shared folders contribs or mount / with acl, AFAIR you can use the windows applet to set the permission.

ciao
Stefano
Title: Re: How do you deal with sub level folder access ?
Post by: CharlieBrady on July 02, 2009, 09:19:39 PM
General question for you all, how do you deal with sub level folder permissions with samba?

...

So if we have an example:

Top level
Documents (Everyone permissions)

Sub levels
Joe (joe read/write)
John (John read/write)

So then John cannot access Joe and vice vesa.  Does anyone do this already ?

You know this already, but you ask, so it seems you need to be told - the i-bay design pattern does not allow or have support for this.

Put the Joe stuff in an i-bay with the permissions you want for Joe, and the John stuff in an i-bay with the permissions you want for John. Do they really need to be subdirs of Documents? If they do, then use the Windows equivalent of symbolic links.
Title: Re: How do you deal with sub level folder access ?
Post by: byte on July 02, 2009, 09:28:41 PM
You know this already, but you ask, so it seems you need to be told - the i-bay design pattern does not allow or have support for this.

Of course I already know this but that is not my question...my question is why I "how do you deal with..."

Thanks.

Title: Re: How do you deal with sub level folder access ?
Post by: kb-ohnemus on July 02, 2009, 10:13:55 PM
if you use the shared folders contribs or mount / with acl, AFAIR you can use the windows applet to set the permission.

ciao
Stefano

I think you need to install the package "acl" to achieve this. I didn't test on SME or Centos and don't know if this works together with ibays, but had this running on a SuSE-server and could easily change the permissions in windows explorer or getfacl/setfacl on the server.

But when I switched to SME I was also quite comfortable setting permissions only by ibays and groups because this is more transparent than setting them per folder or user.
Title: Mapping a Network Drive
Post by: cibisystems on July 04, 2009, 02:52:24 PM
Sir, I have tried your SME server - shared folders. It is fantastic & works great. Is there any way to change the storage path to a mapped network drive. I have external Nas Box, and would like to store all the files into the nas.

Please help me out.

regards
rajkumar
Title: Re: How do you deal with sub level folder access ?
Post by: rrizley on July 21, 2009, 11:05:04 PM
I use a great tool called 'putty' that you can download from www.putty.org.  You can log into your server as 'root' and set the file permissions.  Let me know if this helps or if I am totally off-base. rr.