Prevent users from deleting files on a share

[pge40]

Hello there,

I am sorry in advance if I posted this att he wrong place.

We have a TS-831X with firmware 4.3.4.0435 integrated with AD at our company.
I created a new share that supposed to be accessed by 6 users only and one of them, should not be able to delete files other that her own.
In AD I created two groups: Share_RO and Share_RW and added them to the share permissions on the QNAP, then I realized this will not work.

How can I allow users RW access to shares and prevent them from deleting other users' files in any subfolder of that share?

Thank you,

[dolbyman]

can't you just set the ACL " Delete Folders and Files" to 'Deny' on the user ?

[pge40]

I can't do that, from Windows, I have access to the share only and this is not share permissions.
I have over 5000 folders that I'm copying to that share with no parent folder. If I do that, I'd have to do it to each existing folder.
Is there a way to do it from the QNAP?

[dolbyman]

no idea what your folder structure looks like

why no 'home' folders for each user ? (inherit permissions for subfolders after)

[pge40]

This is not home folders, it's for production folders and there is one user that everyone else is suspecting that she deletes other people's work.
She needs to be prevented from deleting any files that she is not the owner of. I don't think I can do it with NTFS permissions, but I'm not sure.
I could potentially move all the 5000+ folders to a parent folder and set the permissions on that folder but I'm sure it would frustrate the user to access the share, then access a folder to get to their working files and folders.

[dolbyman]

try experimenting with the creator/owner group

read permissions for general group
creator owner group full access
everyone but that one user in a read/write group

so that makes that user able to read/write/delete her own files , prevents her from deleting non owned/created files and enables everyone else to delete/edit her files

[pge40]

Thanks for the advice. I can experiment on a folder within the share because everything is almost 500GB.
If I make a change and apply it to everything in there, then have to change settings, it would take a long time to find the proper combination.
But i'll definitely try it. Thanks again.

[dolbyman]

try it on a small folder .. when succeeded apply to the large folder