[Samba] Subfolders and permissions

[Paul Rijke]

Hi,

 

I have currently a department called HRM which have their own share
/data/hrm

 

Within that share is a folder called recruitment.

 

We recently hired an external recruiter to do some work for us. The folder
is /data/hrm/recruitment

 

How can I enforce that this person can only read and write in this
directory? Look below, is this the way to go? How would you handle this?

 

My config:

#======================= Global Settings
=====================================

[global]

            dns proxy = no 

            log file = /var/log/samba/log.%m

            netbios name = srv01

            load printers = yes

            server string = srv01.mydomain.com

 

            workgroup = MYDOMAIN

            os level = 20

            username map = /usr/local/etc/samba/smbusers

            

            encrypt passwords = yes

            hosts allow = 192.168.20. 127.

            security = user

            max log size = 50

 

#============================ Share Definitions
==============================

 

# the "staff" group

[hrm]

            writeable = yes

            path = /data/hrm

            write list = @hrm

            force group = hrm

            valid users = @hrm

            create mode = 764

            directory mode = 774

 

[recruitment]

            comment = Recruitment Share

            valid users = @recruitment

            writeable = yes

            path = /data/hrm/recruitment

            write list = @recruitment

            force group = recruitment

            create mode = 764

            directory mode = 774