Adaptec 5325301656 Administration Guide - Page 99

SnapTrees and Security Models SnapTree Functionality The following table describes the behavior of SnapTrees and Security Models. Function Description SnapTree Directory Ownership Security Personality of Files and Directories Default ownership differs according to the method used to create the SnapTree directory: • From the client - For UNIX personality directories, the owner and owning group will be according to the logged-in user. For Windows personality directories, the owner will be the logged-in user, or "Administrators" for directories created by Domain Admins or members of the local admingrp. • From the Administration Tool - For UNIX personality directories, the user and group owner will be admin and admingrp. For Windows personality directories, the owner will be the local admingrp ("Administrators"). Files and directories created by clients inside SnapTrees will acquire security personality and permissions according to the rules of the SnapTree security model. Windows/Mixed SnapTree • Files and directories created by SMB clients will have the Windows security personality. Permissions will either be inherited according to the ACL of the parent directory (if Windows) or will receive a default ACL that grants the user full access only (if the parent is UNIX or has no inheritable permissions). • Files and directories created by non-SMB clients will have the UNIX personality. UNIX permissions will be as set by the client (per the user's local umask on the client). • The security personality of a file or directory can be changed by any user with sufficient rights to change permissions or ownership. If a client of one security personality changes permissions or ownership of a file or directory of a different personality, the personality will change to match the personality of the client protocol (e.g., if an NFS client changes UNIX permissions on a Windows file, the file will change to the UNIX personality). UNIX SnapTree • Files and directories created by non-SMB clients will have the UNIX personality. UNIX permissions will be as set by the client (per the user's local umask on the client). • Files and directories created by SMB clients will have the UNIX personality. UNIX permissions will be set to a default. • The personality of files and directories cannot be changed on a UNIX SnapTree. All files and directories always have the UNIX personality. Chapter 6 Share and File Access 85