No you not understand priority of permisions on NT and samba is this identical but samba without ACL is simples.
Highest priority to acces any file is file permision and owner on linux filesystem respect by samba. Secondary is directory permision and ownership with parent respect structure. And last is share definition that set only permision implicit for network. if share is read only then all under this share is read only used over this share but another share can be write to this or its subdirs. else if share is writable then only user with suficient name and group to !!share directory!! permision can write to directory structure as is rename delete or create files and subdirs. And only users and groups that have suff permision to exist files can read, execute or change it. This all is controlled by filesystem not over samba conf (if you install filesystem with acl then you can set more perms on one file as clasic user-group-other). Samba conf only control settings perm of new files and dirs created over net. Bye. ----- Original Message ----- From: "ipguy" <[EMAIL PROTECTED]> To: "John H Terpstra" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Wednesday, June 04, 2003 10:33 AM Subject: Re: [Samba] subshares ? > so my only option is NT ACL support then... > > > > > > > On Tue, 3 Jun 2003, ipguy wrote: > > > > > hi all... > > > i have what seems a simple question regarding subshares, for lack of a > better term... > > > say i have a share with specific user/group permissions and a directory > inside the share that i would like to add different user/group > permissions... > > > this is an example of my smb.conf file to illustrate > > > > > > [driveA] > > > path = /samba/driveA > > > browseable = Yes > > > writeable = Yes > > > valid users = PDC+groupA > > > force group = PDC+groupA > > > > > > [driveB] > > > path = /samba/driveA/driveB > > > browseable = No > > > writeable = Yes > > > valid users = PDC+groupB > > > force group = PDC+groupB > > > inherit permissions = No > > > > > > shouldn't this restrict groupA users from accessing the subshare called > > > "driveB" located inside the share "/samba/driveA" ?? > > > > driveB is a directory in /samba/driveA from the perspective of the driveA > > share. IT is NOT a sub-share, there is no such thing in the SMB/CIFS > > protocol specification. > > > > That means that users of the share called driveA will be able to access > > the contents of the directory driveB as permitted by the permissions on > > the driveBdirectory. > > > > - John T. > > -- > > John H Terpstra > > Email: [EMAIL PROTECTED] > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
