[Samba] AccessCheck
Rucker, Karsten
KRucker at MuellerBBM-vas.de
Sun Mar 24 22:27:02 GMT 2002
Hello,
we are using an application, which uses NT's AccessCheck function to check
e.g. if I a file is readable.
It seems that this function does not work correctly with Samba. The samba
version we are using is 2.0.7.
In more detail: we have a directory DATA with the following access rights:
ll -d /proj/qx/DATA
drwxr-xr-- 8 qx dynamik 1024 20.Marz,13:41 /proj/qx/DATA
The user qx is able to use the NT explorer to traverse to directory DATA and
list its contents. If the user is creating a directory or file from the NT
explorer the newly created directory/file belongs
to (unix) qx and group dynamik.
Using windows AccessCheck function (by user qx) to check for example for
FILE_READ_DATA we found that
read data is granted as expected.
Now there exist a sub directory with no read access for the world:
ll -d /proj/qx/DATA/rot
drwxr-x--- 8 qx dynamik 1024 20.Marz,13:41 /proj/qx/DATA/rot
Using access check on this directory by qx gives that e.g. read data
is not granted. Using the NT explorer qx can still do everything
with /proj/qx/DATA/rot he can do with /proj/qx/DATA. Why?
Best regards
K.Rucker
More information about the samba
mailing list