[Samba] AccessCheck

Rucker, Karsten KRucker at MuellerBBM-vas.de
Sun Mar 24 22:27:02 GMT 2002


Hello,

we are using an application, which uses NT's AccessCheck function to check
e.g. if I a file is readable. 
It seems that this function does not work correctly with Samba. The samba
version we are using is 2.0.7.

In more detail: we have a directory DATA with the following access rights: 
ll -d /proj/qx/DATA
drwxr-xr--  8 qx  dynamik  1024  20.Marz,13:41 /proj/qx/DATA

The user qx is able to use the NT explorer to traverse to directory DATA and
list its contents. If the user is creating a directory or file from the NT
explorer the newly created directory/file belongs 
to (unix) qx and group dynamik. 
Using windows AccessCheck function (by user qx) to check for example for
FILE_READ_DATA we found that 
read data is granted as expected.

Now there exist a sub directory with no read access for the world: 
ll -d /proj/qx/DATA/rot
drwxr-x---  8 qx  dynamik  1024  20.Marz,13:41 /proj/qx/DATA/rot 
Using access check on this directory by qx gives that e.g. read data 
is not granted. Using the NT explorer qx can still do everything 
with /proj/qx/DATA/rot he can do with /proj/qx/DATA. Why?

Best regards
K.Rucker





More information about the samba mailing list