Windows share - some users r only some r/w

[flycast]

I am sure there are multiple ways to do this.
How would I set up a Windows share that allows some users read only access and other users r/w access?

 

[ben]

local user login, 775 permissions, put users you want to have read-write in the group that owns it and the rest in another group.

 

[flycast]

So I would have two groups for a share called "Share":
ShareReadOnly
ShareReadWrite

Add read only users to the ShareReadOnly group and read/write users to ShareReadWrite.

Are you saying that you can make a share OWNED by a group or are you saying that you can attach two groups to the same share? In Linux I thought that you could only have a user own a folder and one group/one user on a folder???

 

[ben]

Make the volume you're sharing OWNED by the ShareReadWrite, that way those in ShareReadOnly will be "other" from the point of view of the volume. Thus 775 permissions will let ShareReadWrite users read and write and ShareReadOnly only read.

 

[flycast]

With permissions set to 775 won't any user that is not the folder owner or a member of "ShareReadWrite" group be considered "other" and be able to read/execute?

 

[ben]

Yes, if they have a local user login. If you need more complex arrangements than this can support, you may need active directory or LDAP. Depends on the specific problem you're trying to solve and the resources you have.

 

[flycast]

I am trying to have multiple shares and give a specific user r/w or r only to any share. The default for any share would be no visibility for all users and a user would be specifically granted rights (r only or r/w) when added.

 

[ben]

If there's only a SINGLE user that needs read write to each share, you can make them the user owner, give the ReadOnly group group ownership and make the permissions on the dataset 750. If there need to be multiple people with Read/Write, I don't immediately know a setup that would give you that within FreeNAS alone.

 

[flycast]

Correct.
I am sure I could do it with acl's - they are just a bit of a pain. I was hoping that there was a feature in freenas GUI that does the same.

 

[ben]

Yeah, the FreeNAS UI is mostly about exposing the most commonly needed parts of the underlying FreeBSD system in the most useful possible way. There might be edge-case-useful unexposed CIFS options that you can put into the settings with the "Auxiliary parameters" field, but I don't know what they would be if so.