Dell DR2000v DR Series System Administrator Guide - Page 21

Windows Permissions Guidelines, Rapid NFS and Rapid CIFS

Page 21 highlights

• Group (group in which the owner belongs) • Other (other users with an account on the system) Each of these three user types support the following access permissions: • Read (read access that allows user to read files) • Write (write access that allows user to create or write to a file) • Execute (access that allows user to execute files or traverse directories in the filesystem) NOTE: A root user has all levels of permission access, and a user can be a member of a single group or of multiple groups (up to 32 groups are allowed in Unix). Windows Permissions Guidelines To enable Windows access, the DR Series system supports access control lists (ACLs) that contain zero or more access control entries (ACEs), and an empty ACE list grants all access requests. The Windows New Technology File System (NTFS) uses ACLs as part of the security descriptor (SD) process, which requires permissions to access such filesystem objects as files and directories. ACLs support two levels of users: • Owners • Groups Both Owners and Groups have Security IDs (SIDs) that define and identify an object owner or the group owning an object. ACEs in an ACL consist of a SID, a specific permission that either allows or denies access and also defines which of the following inheritance settings apply: • IO-inherit-only: not used for access checking. • OI-object inherit: new files get this ACE added. • CI-container inherit: new directories get this ACE added. Windows NTFS ACLs include the following read, write, append, execute, and delete permissions that allow users to: • Synchronize access • Read data or list the directory • Write data or add a file • Append data or add a folder • Read Extended Attributes (EAs) • Write EAs • Execute file or traverse folders • Delete child or delete folders • Delete a file The Owner user type has two default permissions: • Write discretionary ACL • Read control Rapid NFS and Rapid CIFS Rapid NFS and Rapid CIFS enable write operation acceleration on clients that use DR replication and NFS or CIFS file system protocols. Similar to OST and RDS, these accelerators allow for better coordination and integration between DR Series system backup, restore, and optimized deduplication operations with Data Management Applications (DMAs) 21

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187

Group (group in which the owner belongs)
Other (other users with an account on the system)
Each of these three user types support the following access permissions:
Read (read access that allows user to read files)
Write (write access that allows user to create or write to a file)
Execute (access that allows user to execute files or traverse directories in the filesystem)
NOTE:
A root user has all levels of permission access, and a user can be a member of a single group or of multiple
groups (up to 32 groups are allowed in Unix).
Windows Permissions Guidelines
To enable Windows access, the DR Series system supports access control lists (ACLs) that contain zero or more access
control entries (ACEs), and an empty ACE list grants all access requests. The Windows New Technology File System
(NTFS) uses ACLs as part of the security descriptor (SD) process, which requires permissions to access such filesystem
objects as files and directories. ACLs support two levels of users:
Owners
Groups
Both Owners and Groups have Security IDs (SIDs) that define and identify an object owner or the group owning an
object. ACEs in an ACL consist of a SID, a specific permission that either allows or denies access and also defines
which of the following inheritance settings apply:
IO—inherit-only: not used for access checking.
OI—object inherit: new files get this ACE added.
CI—container inherit: new directories get this ACE added.
Windows NTFS ACLs include the following read, write, append, execute, and delete permissions that allow users to:
Synchronize access
Read data or list the directory
Write data or add a file
Append data or add a folder
Read Extended Attributes (EAs)
Write EAs
Execute file or traverse folders
Delete child or delete folders
Delete a file
The Owner user type has two default permissions:
Write discretionary ACL
Read control
Rapid NFS and Rapid CIFS
Rapid NFS and Rapid CIFS enable write operation acceleration on clients that use DR replication and NFS or CIFS file
system protocols. Similar to OST and RDS, these accelerators allow for better coordination and integration between DR
Series system backup, restore, and optimized deduplication operations with Data Management Applications (DMAs)
21