[Samba] samba acl - able to change permissions that contradict user security setting

[suresh.kandukuru at emc.com]

Smith, Thanks again  for answering. I have gone through samba source code , I have assumed that when the samba user "admin"  gives read write access to "test_subfolder" for the user "user1" from the windows security tab  ( user1 has read only access to share "test")  samba code posix_acl.c look at the read list of the share "test" ( since the user1 in read list ) and denies  assigning rw access to test_subfolder. it looks like code is not designed like this.

if you don't mind , Can you please explain this ,

----------
- although you would be asking
it to restrict the admin's rights, which wouldn't be proper behavior.
Plus it then wouldn't work like a Windows box, which is a primary
goal.
----------------


Thanks
Suresh

-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Chris Smith
Sent: Wednesday, September 08, 2010 9:24 PM
To: Kandukuru, Suresh
Cc: samba at lists.samba.org
Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting

On Wed, Sep 8, 2010 at 11:14 AM,  <suresh.kandukuru at emc.com> wrote:
> Thanks smith for the quick reply. what I want to know is ,can not samba source code  prevent the changing setting rw access to "test_subfolder" user1 , since he has only read only access on  the share "test".

I suppose you could patch it to do so - although you would be asking
it to restrict the admin's rights, which wouldn't be proper behavior.
Plus it then wouldn't work like a Windows box, which is a primary
goal.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba