SMB Share ACL follow Filesystem ACL

[Nicolas_Studiokgb]

Hello

Is there a way for Share ACL to follow Filesystem ACL

I want each shares to be visible only for users or groups that have access to it.
For now I have to setup 2 ACL for each shares and it's seams complicated as I can't get it work... lol

Thanks
Nicolas

 

[anodos]

Hello

Is there a way for Share ACL to follow Filesystem ACL

I want each shares to be visible only for users or groups that have access to it.
For now I have to setup 2 ACL for each shares and it's seams complicated as I can't get it work... lol

Thanks
Nicolas

Not without code change in the RPC server.

 

[Nicolas_Studiokgb]

Ok
So I might be newbie but I can't get share ACL to work.
How I say this group can access and this one can't ?
Maybe I explain What I want to do it would be simpler : (It's what we have in our actual Win server/Acronis fileconnect AFP server)

Dataset structure :

POOL
+PROJECTS
++FILM1
++FILM2
...

FILM1 and FILM2 are child dataset of PROJECTS

Let's asume 3 users :
PROJECTS_manager (in a admin group)
FILM1_user (in users group)
FILM2_user (in users group

PROJECTS_manager must be able to access and full control everything in the dataset PROJECTS and FILMx child dataset

FILM1_user must be able ONLY to see FILM1 and have full control in it

FILM2-user must be able ONLY to see FILM2 and have full control in it

FILM1_user and FILM2_user should not see "PROJECTS"

Clients are mac os monterey via SMB

Hope it is clear :)

Thanks a lot for your time

Nicolas

 

[Nicolas_Studiokgb]

Not without code change in the RPC server.

I manage to do what I wanted with ACL. So we have to setup ACL twice, in filesystem and in smb shares... a script that copy filesystem acl to share acl would be very very very usefull ;) (a little button in share acl labeled "copy from filesystem acl" ;)

I couldn't find how to deal with groups in share acl. I can manage users but I don't know how to syntax groups, that would simplify this also.

Let me know if there is a way
Thanks
Nicolas

 

[Nicolas_Studiokgb]

I found how to deal with groups
Simply put group name in Name field AND delete SID if there is already something as couple Name / Sid won't match anymore ;)
Subtle :D