Configuring Share Access
Chapter 6 Share and File Access
105
Configuring Share Access
The GuardianOS supports share-level as well as file- and directory-level
permissions (see “Windows ACLs” on page 107) for all local and Windows domain
users and groups.
Share Access Behaviors
Administrators tasked with devising security policies for the SnapServer will find
the following share access behaviors of interest:
• Share access defaults to full control —
The default permission granted to users
and groups when they are granted access to the share is full control. You may
restrict selected users and groups to read-only access.
• User-based share access permissions are cumulative —
An SMB, AFP, HTTP, or
FTP user's effective permissions for a resource are the sum of the permissions
that you assign to the individual user account and to all of the groups to which
the user belongs in the Share Access page. For example, if a user has read-only
permission to the share, but is also a member of a group that has been given full-
access permission to the share, the user gets full access to the share.
• NFS access permissions are not cumulative —
an NFS user's access level is based
on the permission in the NFS access list that most specifically applies. For
example, if a user connects to a share over NFS from IP address 192.168.0.1, and
the NFS access for the share gives read-write access to
*
(All NFS clients) and
read-only access to 192.168.0.1, the user will get read-only access.
• Interaction between share-level and file-level access permissions —
When both
share-level and file-level permissions apply to a user action, the more restrictive
of the two applies. Consider the following examples:
Example A:
More restrictive file-level access trumps more permissive share-level
access.
Share Level
File Level
Result
Full control
Read-only to FileA
Full control over all directories and files in
SHARE1
except
where a more restrictive file-level
permission applies. The user has read-only
access to FileA.
Summary of Contents for 5325301507 - Snap Server 4400 NAS
Page 2: ......
Page 12: ...xii SnapServer Administrator Guide ...
Page 16: ...xvi SnapServer Administrator Guide ...
Page 58: ...Print Server 42 SnapServer Administrator Guide ...
Page 64: ...NIS Domain 48 SnapServer Administrator Guide ...
Page 110: ...Configuring VSS VDS for iSCSI Disks 94 SnapServer Administrator Guide ...
Page 154: ...Log View 138 SnapServer Administrator Guide ...
Page 228: ...Phone Home Support 212 SnapServer Administrator Guide ...