Traverse folder / execute file

    This site uses cookies. By continuing to browse this site, you are agreeing to our Cookie Policy.

    • Traverse folder / execute file

      Hello,

      I suppose already created 2 shared folders + a user 'john'.

      \\omv\HR
      \\omv\IT



      Question: is it possible to let user "john"
      - having ReadOnly on \\omv\HR\Plan
      - but he's not allowed to list folder contents of its parent \\omv\HR (looks like the "Traverse folder / execute file" permission on Windows Server if I'm not mistaken)

      Thanks for your help and kindly see my configurations below.







    • Re: Traverse folder / execute file

      In the picture for ACL on the plan folder. Look at read only check for John. Notice the tiny red triangle by the checkmark. Anytime you see this red triangle a setting may have been saved but it is not applied to the configuration. These settings will not work until applied and the red triangle is gone.
    • Re: Traverse folder / execute file

      Give me screenshot of your shared folders and the smb/cifs page where you added shares to samba.

      If you just want this user to have access to this folder you might create another shared folder. Then share it with SMB/CIFS. Then use symmlinks from the Plan folder to the new folder for this user. This way he would not be able to browse the folder structure you have setup.
    • Re: Traverse folder / execute file

      Create new shared 'Plan' should do the trick, but it doesn't make sense from my side as the sharing environment will be messing-up then.
      From the user-side, it's allowed to display two shared "HR" and "IT" in this case only.

      Please check the below screenshots



    • Re: Traverse folder / execute file

      I just tested it. It does work for the filesystem, however I have not yet figured out how you tell samba to acknowledge that flag.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: Traverse folder / execute file

      I can't. I tested it via CLI. It does not work with samba, and I can't find out how to tell samba to acknowledge it.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: Traverse folder / execute file

      Got it. But you have to workaround pretty dirty to get this to work.

      Let me think about it for a bit more...

      Edit: The philosophy of OpenMediaVault is, that all users are in the users group and that all shares are owned by root:users. This makes the use of the traverse flag impossible. To be able to use it we either have to remove of the users group (from a user) or be able to change the owner:group of the shared folders. This means, for now you would need to create a new group and then change the group of the share to this new group. All Members that are allowed to access full HR get into this group. The other members just get the permission to access their specific folders, and chmod has to be changed to 771 for the HR folder.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: Traverse folder / execute file

      The problem is that you need to give Plan-Read read rights via ACL on HR and you need to remove the read/write chmod from the HR folder for the users group - this allows plan-read to move through that folder, but it renders it at the same time unusable for all other users. Therefore you need to have the plan-read user NOT in the users group, so that you don't have to change the chmod for the group, but you can't pull him out of the group via the webinterface.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: Traverse folder / execute file

      Don't try it... I have to speak to Volker to enable this from the GUI.

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.
    • Re: Traverse folder / execute file

      After talking to Volker I wrote down the needed things as best as I could do.

      I hope that it helps him to understand and implement it properly.

      bugtracker.openmediavault.org/view.php?id=1023

      Greetings
      David
      "Well... lately this forum has become support for everything except omv" [...] "And is like someone is banning Google from their browsers"

      Only two things are infinite, the universe and human stupidity, and I'm not sure about the former.


      Upload Logfile via WebGUI/CLI
      #openmediavault on freenode IRC | German & English | GMT+1
      Absolutely no Support via PM!

      I host parts of the omv-extras.org Repository, the OpenMediaVault Live Demo and the pre-built PXE Images. If you want you can take part and help covering the costs by having a look at my profile page.