Folder Access Rights

[Felix1]

I reckon I've read just about all the posts on this issue and don't believe I can find a simple solution that spells out how to set up the user rights on the QNAP ( I have a new TS410).

I have an old P3 Windows 2k server that provides AD on my home network, principally used to manage my family members' access rights to different folders.

The problem is a confusing number of user rights and group rights on the QNAP so there seem to be a huge number of alternative settings to make it work.

Also there are four choices for access rights - blank, RO,RW and Deny. What does blank do? Is that a default deny?

Basically, all I want to do is set up a personal folder for each person on the QNAP. The only people to have access to these folders is that person and the admin user.

I have a software folder that should be RW for admin and my account and RO for everyone else.

I have a general folder where all folders are open for sharing by family members only

I have a public folder that anyone can access.

Etc, etc

Now can any demonstrate what settings I should use on each folder? At the moment everyone has access to all other user's folders (choosing RW for Domain Users group). If I remove this then they can't access their own folders.

I've created a spreadsheet (image attached) and unfortunately quite small... but that is the forum's fault!

Cheers,

Felix

Permissions2.JPG (69.93 KiB) Viewed 2744 times

[schumaku]

Dear Felix,

The only way to achieve this is by replace "folder" with "share" - the QNAP NAS does not support ACL on subdirectories as per v3.2 firmware. Please do not place additional shares pointing to lower directories - strange things will happen with the access rights.

There is neither a simple nor a more complex solution that works deploying your access scheme on a directory or folder level.

Yes, it is hard to believe - but it's true.

-Kurt.

[Felix1]

Hi Kurt,

Thanks for replying, however I'm afraid I don't understand your advice.

At the top level (not sub directory)...

If I go into [Access Rights Management] [New shared folder] and creat a folder called "Person1" then give that person RW rights to that folder, how do I stop all the other users from accessing the folder?

Felix

[schumaku]

Felix,

Under Access Right Management >> Share Folder, you can on a per-share level adjust the access rights - Action - the second (yellow, folder with a hand) icon "Access Rights" you can adjust the Access Right to the Share Folder on Group or User level.

These settings apply to access using Windows File Share, AFP, and ftp.

Regards,

-Kurt.

[Felix1]

Thanks for your assistance, Kurt.

So if I have a person called "User1" and I create a shared folder for them, also called "User1" What RW or Deny rights do I have to set for
(a) local user
(b) domain user
(c) local groups
(d) domain groups

The problem I have is I've set up the access rights according to the spreadsheet in my first post, and everyone has access to everyone else's folders.

Felix

[schumaku]

Use either domain users/groups or local groups/users.

For the User1 share, select the User1 form the users list, and grant access r+w, all thers set to deny.

[Felix1]

Hi Kurt,

I've found that I have to give RW acce4ss to the Domain+Users group to allow people to access their own folder.

However this also gives them RW access to everyone's folders.

Without RW access to this group, no-one can access the folder, even if they are given access as a domain user. The group setting seems to over-ride the individual one.

Felix