Set permission on share folders, best practices

Hi,

After reading a loton news ransomware and because my kids grow up, I would like a guide or some advise on setting permission.

I have a shared folder with ACL to "users" on RWE. But "others" too (RWE) : I think it's not such a good idea (my omv is nbot open to internet though)

No user or group set (but plex)

don't need a folder for each user. Just an easy way to prevent deletions, or attacks from ransomware

thanks

Thanks.

I would like explanation to always have an access for anonymous/ guest read only.

sometimes when I want to upload to OMV, use then a specific user

Thanks again