On 01/11/11 02:29 AM, Ryan Park wrote:
Hello all,

First I like to thank you for the help. Thank you.

I have created smb share on opensolaris 134.
joined windows 2008 active directory and map the share to the system.

I have couple acl access permission problem.

When managing ZFS ACLs from the Windows desktop it should behave
in a very similar way to Windows, and there's lots of information
on the Internet.  Google finds lots of useful information and
Microsoft offers lots of knowledge base articles on:

        http://msdn.microsoft.com/
        http://support.microsoft.com/
        http://technet.microsoft.com/

First, when I created the file and change delete permission to deny delete 
permission from windows side.
but user still can delete the file.

Most likely the parent directory still has Delete Child permission.
On Windows this hidden permission is granted automatically when a
directory ACE is set to Full Control:

        File Delete Child directory permission in NTFS
        http://support.microsoft.com/kb/152763

If that's the case you could try changing the parent directory ACEs
to grant Modify rather than Full Control.

Second, I have taken the snapshot and restored from windows folder/file 
property-->previous version tab
When I delete the file and restores is using different user account.
that account has access to the file.

Please give me light to guide throught this problem

The file ownership on restore may be determined by the Windows
client and/or on the inheritance ACEs in the parent directory
ACL and which account you used to connect/map the share.

        ACE Inheritance Rules
        http://msdn.microsoft.com/en-us/library/aa374924%28VS.85%29.aspx

Alan
_______________________________________________
storage-discuss mailing list
storage-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

Reply via email to