AFP548 Changing the world one server at a time.

ACL complication

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #366249
    dboone
    Participant

    I am setting up an Apple File Server running OS X Server 10.4.6. I have enabled, and am using ACL’s for the server. I am a bit of a newbie with file serving and ACL’s so I have run into a little problem.

    I would like to create a share that all of the members of a group have read and write access to. However, I would like only the owners of the files/folders on that share to be able to delete their files/folders. I have the permissions configured as follows. For the POSIX permissions the owner can read and write, group can read only, and others have no access. I have one ACE for the group I have created. I have allowed all read permissions, and I have allowed all write permissions except for delete and delete subfolders and files.

    The problem is that this doesn’t allow the owner of the files and folders created in this share to delete them. When permissions are checked the ACE for the group the owner is a member or (which doesn’t allow deletion) overrides the POSIX permissions (which would otherwise allow for deleting).

    Is there a work around to allow me to have permissions set the way I would like them?

    TIA,
    Drew

    #366267
    dboone
    Participant

    Exactly, I figured out that the ACE permissions were overriding my POSIX permissions in this case after I had read the whitepapers. (excellent whitepapers btw, most thorough and concise I have found)

    I don’t really want particular users to have blanket delete rights, as your solution suggests. I only want the owners of files and folders to have delete rights. e.g. user1 creates a file/folder and retains full read/write rights over that file/folder, including deleting. user2 can read and append the file/folder but cannot delete. I don’t want to have to manually manipulate permissions on each file in order to do this, but perhaps this is not possible.

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.