[Samba] Write access doesn't grant delete access?!

Jeremy Allison jra at samba.org
Wed May 3 17:31:21 GMT 2006


On Wed, May 03, 2006 at 03:35:11PM +1000, Adam Nielsen wrote:
> Hi all,
> 
> I've got these permissions set on a folder:
> 
> $ getfacl htdocs
> 
> # file: htdocs
> # owner: root
> # group: users
> user::rwx
> group::rwx
> group:DOMAIN\134htdocs_access:rwx
> mask::rwx
> other::r-x
> 
> The idea being that any users in the "htdocs_access" group in Active
> Directory will have full access to this "htdocs" folder, without
> interfering with the real owner/group of the folder (which the web
> server uses.)
> 
> This seems to work fine, except that any files I create through Windows
> Explorer I can't delete again (I can edit them and create more files,
> but I can't delete anything.)  Viewing properties on the file indicates
> that the DOMAIN\htdocs_access group doesn't have Delete permission (the
> Delete checkbox is unticked) but the other permissions seem fine.
> 
> I didn't realise that Samba treated Delete access separately to Write
> access - how do I grant Delete access on a folder?

It doesn't. Can you post a debug level 10 log of a delete request please?

Jeremy.


More information about the samba mailing list