ieronymous
Dabbler
- Joined
- Feb 22, 2023
- Messages
- 14
Hi
I created a test dataset on a TrueNAS-SCALE-22.12.2 version, named Creativestoresmb which is a child of the ActiveDpool dataset. This will be shared via smb to macOS (Monterey version) clients for project storage usage. I have created a user natal and a group as well. I set the ACLs in a way that user natal is the owner of the Creativestoresmb dataset with read/write/execute permissions. At dataset's options / advanced the ACL Type is set to default POSIX.
Extra info
SMB Services->advanced->UNIX Charset: UTF-8
Enable Apple SMB2/3 Protocol Extensions is not checked if I m not mistaken, the benefits are for Time Machine support.
Share ACL for Creativestoresmb->Permission*: FULL
->Type: ALLOWED
Also automatically the ActiveDpool->Creativestoresmb dataset has automatically created a child dataset with the name of the user so it is
ActiveDpool->Creativestoresmb->natal
POSIX Permissions for natal dataset (auto-created) are:
User Obj – natal Read | Write | Execute
User – natal Read | Write | Execute
Group Obj – natal Read | Write | Execute
Group – natal Read | Write | Execute
Mask Read | Write | Execute
Other Read | Execute
User Obj – default – natal Read | Write | Execute
User – default – natal Read | Write | Execute
Group Obj – default – natal Read | Write | Execute
Group – default – natal Read | Write | Execute
Mask – default Other – default
Other – default Other – default
POSIX Permissions for Creativestoresmb dataset (parent of natal) are:
Permissions:
Owner: natal
Group: natal
Unix Permissions
person natal Read | Write | Execute
people natal Read | Write | Execute
groups Other Read | Execute
The issue is that when the user connects to the share and copies a project there, then it can modify the file names for instance but he can t modify name of folders though, Each time trying to change a folder's name, a credential window pops up asking for user/pass which she gives and an error message about wrong credentials is returned which is not the case. If I access the share from a Win client and try to change the name of the file it lets me.
Maybe permission issues.....
I created a test dataset on a TrueNAS-SCALE-22.12.2 version, named Creativestoresmb which is a child of the ActiveDpool dataset. This will be shared via smb to macOS (Monterey version) clients for project storage usage. I have created a user natal and a group as well. I set the ACLs in a way that user natal is the owner of the Creativestoresmb dataset with read/write/execute permissions. At dataset's options / advanced the ACL Type is set to default POSIX.
Extra info
SMB Services->advanced->UNIX Charset: UTF-8
Enable Apple SMB2/3 Protocol Extensions is not checked if I m not mistaken, the benefits are for Time Machine support.
Share ACL for Creativestoresmb->Permission*: FULL
->Type: ALLOWED
Also automatically the ActiveDpool->Creativestoresmb dataset has automatically created a child dataset with the name of the user so it is
ActiveDpool->Creativestoresmb->natal
POSIX Permissions for natal dataset (auto-created) are:
User Obj – natal Read | Write | Execute
User – natal Read | Write | Execute
Group Obj – natal Read | Write | Execute
Group – natal Read | Write | Execute
Mask Read | Write | Execute
Other Read | Execute
User Obj – default – natal Read | Write | Execute
User – default – natal Read | Write | Execute
Group Obj – default – natal Read | Write | Execute
Group – default – natal Read | Write | Execute
Mask – default Other – default
Other – default Other – default
POSIX Permissions for Creativestoresmb dataset (parent of natal) are:
Permissions:
Owner: natal
Group: natal
Unix Permissions
person natal Read | Write | Execute
people natal Read | Write | Execute
groups Other Read | Execute
The issue is that when the user connects to the share and copies a project there, then it can modify the file names for instance but he can t modify name of folders though, Each time trying to change a folder's name, a credential window pops up asking for user/pass which she gives and an error message about wrong credentials is returned which is not the case. If I access the share from a Win client and try to change the name of the file it lets me.
Maybe permission issues.....