Adaptec 5325301638 Administration Guide - Page 64

The NFS Warning Message, Setting File and Folder Permissions (Windows)

Page 64 highlights

Setting File and Folder Permissions (Windows) • Interaction between share-level and file-level access permissions - When both share-level and file-level permissions apply to a user action, the more restrictive of the two applies. Consider the following examples: Example A: More restrictive file-level access trumps more permissive share-level access. Share Level File Level Result Full control Read-only to FileA Full control over all directories and files in SHARE1 except where a more restrictive file-level permission applies. The user has read-only access to FileA. Example B: More restrictive share-level access trumps more permissive file-level access. Share Level File Level Result Read-only Full control to FileB Read-only access to all directories and files in SHARE1, including where a less restrictive filelevel permission applies. The user has read-only access to FileB. The NFS Warning Message The Administration Tool displays a warning that security settings for a share may not apply to NFS clients when all of the following criteria are met: • Access to the server via NFS is enabled • Access to the share via NFS is enabled • The AllUsers group is not given full access Setting File and Folder Permissions (Windows) On files and directories following the Windows security model, the GuardianOS supports the use of the Windows NT, 2000, or XP interface to set directory and file permissions for local and domain/ADS users and groups on the Snap Server. On a directory, administrators can also set inheritance permissions that will be inherited by subordinate folders and files created within the directory. Default File and Folder Permissions When a file or directory is created, the GuardianOS grants access to the accounts listed in the following table. Access permissions for each account are inherited from 50 Snap Server Administrator Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148

Setting File and Folder Permissions (Windows)
50
Snap Server Administrator Guide
Interaction between share-level and file-level access permissions —
When both
share-level and file-level permissions apply to a user action, the more restrictive
of the two applies. Consider the following examples:
Example A:
More restrictive file-level access trumps more permissive share-level
access.
Example B:
More restrictive share-level access trumps more permissive file-level
access.
The NFS Warning Message
The Administration Tool displays a warning that security settings for a share may
not apply to NFS clients when all of the following criteria are met:
Access to the server via NFS is enabled
Access to the share via NFS is enabled
The AllUsers group is not given full access
Setting File and Folder Permissions (Windows)
On files and directories following the Windows security model, the GuardianOS
supports the use of the Windows NT, 2000, or XP interface to set directory and file
permissions for local and domain/ADS users and groups on the Snap Server. On a
directory, administrators can also set inheritance permissions that will be inherited
by subordinate folders and files created within the directory.
Default File and Folder Permissions
When a file or directory is created, the GuardianOS grants access to the accounts
listed in the following table. Access permissions for each account are inherited from
Share Level
File Level
Result
Full control
Read-only to FileA
Full control over all directories and files in
SHARE1
except
where a more restrictive file-level
permission applies. The user has read-only
access to FileA.
Share Level
File Level
Result
Read-only
Full control to FileB
Read-only access to all directories and files in
SHARE1,
including
where a less restrictive file-
level permission applies. The user has read-only
access to FileB.