How to configure permissions correctly?

  • Alternatively you could add those parameters to the "extra options" of the share. These parameters are added below the "default parameters" so that the defaults are ignored.


    For testing I changed extra options to:

    Quote

    create mask = 0775
    force create mode = 0664
    directory mask = 0775
    force directory mode = 0775


    Seems to work so far.

  • Just to add another hint to the topic "security":


    If you create a new samba share with default options/parameters, user2 still can edit/delete files/folders of user1. Steps to reproduce (assumption two users exists with default parameters):

    • shared folders -> Add
    • Enter name: "samba" and choose a volume
    • Save
    • SMB/CIFS -> Shares -> Add
    • Enter shared folder: "samba"
    • Save
    • mount the new share "samba" on one client as user1 and on another client as user2.
    • create a file as user1 (in main folder of share!)
    • try to edit or delete this file as user2
    • file will be edited/deleted


    This does not work for files in subfolders of the share. Also deletion of folders does only work if they are empty. I tried this with linux clients (cifs) and win7 clients and both behaved the same way.


    Now we are back to our office situation. How can I make sure that files which user1 has created (in main/root folder of the share) can't be modified or deleted by user2?

Participate now!

Don’t have an account yet? Register yourself now and be a part of our community!