User access control to CIFS Shares

[Marc Locchi]

Hi all,
I set up FreeNas some 10 months ago for home use and it has been ROCK SOLID. Awesome OS!

I am wanting to create two users inside of FreeNas to control access from my Windows PCs as follows:

GUEST: so my children can play a song / movie from their PC - can only access / read the shares (no write / execute access at all). It will have a password.

MASTER: root access to all shares and files in them. Can do anything. I will use this to add files / back up PCs. This login should allow me to even move / delete files created by Media Browser (which right now require me to log in via console to delete).

I have read these threads / guides, but they are not quite setting up the users how I would like so I am stuck.
https://forums.freenas.org/index.php?threads/cifs-windows-sharing-guide.20948/
https://forums.freenas.org/index.php?threads/cifs-not-prompting-for-credentials.19148/

Are there examples of what I am trying to do you can point me to please.

Thanks!
Marc
Xeon E5, 32GB ECC, 40TB ZFS2

 

[anodos]

In the freenas GUI,
1) create two users (bourgeoisie and proletariat).
2) create a dataset with windows permission type (/mnt/tank/wealth)
3) change ownership of /mnt/tank/wealth so that it is owned by the bourgeoise (and rightfully so).
4) create cifs share and start cifs. By default 'everyone' has read-only access to the share. This includes the proletariat.