[Samba] Windows ACLs (non samba)

Alexander Werth werth at linux.vnet.ibm.com
Wed Nov 6 08:12:52 MST 2013


On Wed, 2013-11-06 at 11:07 +1100, me at electronico.nc wrote:
> Windows ACLs groups 'create folder/append data' in the same rule, so I 
> can't refuse 'create folder' if I want 'appen data' (modify files).

The trick is to create two ACL entries:
One with 'create folder/append data' that inherits only to subfolders
and one without 'create folder/append data' that inherits to files.
The entries that inherit to files will also inherit to subfolders but
will not apply to the folders.

Cheers,
Alexander



More information about the samba mailing list