On Feb 27, 2012, at 8:10 AM, Susan Alston wrote:

> I have a lab of iMacs for students.  From any iMac a student can connect to
> general Windows server volume and access their own individual file storage
> folder.  They only have permission to see or open their own folder on this
> server, (not any other student's folder).  That is, this is how it worked
> under Tiger, Leopard, and Snow Leopard (A red circle with a dash displays
> on these other students folders and they are not accessible to anyone but
> themselves).
> 
> I just upgraded one of the iMacs to Lion, and when I connect as a student
> to the server, I can view *all* other student folders.  I have changed
> nothing on the server side.  What can I do to ungrant permission for a
> particular student to see all other student's work in this Windows volume?

This would seem to be a problem server side, and a significant one, because all 
it seems to do to thwart the server established security/privilege regime is 
install Lion client and go hunting. IOW, it's not up to Apple's now proprietary 
SMB implementation to honor privileges, but rather for the server to enforce 
them.

Chris Murphy
_______________________________________________
MacOSX-admin mailing list
[email protected]
http://www.omnigroup.com/mailman/listinfo/macosx-admin

Reply via email to