[Samba] Samba 4 & share permissions

[Sébastien Le Ray]

Hi,

OK, so I guess I've to look at Windows documentation to find a way to 
automagically allow share admins to be added on every single ACL on the 
share. I guess I somehow unchecked the "Inherit permission" checkbox at 
some point.

Thank you for the tip :)

Regards,

Le 22/08/2014 17:43, Marc Muehlfeld a écrit :
> Hello Sébastien,
>
> Am 22.08.2014 14:02, schrieb Sébastien Le Ray:
>> I'm using Samba 4 as an AD DC and have a file server under samba 4 too.
>>
>> I created a group "Share admins" with SeDiskOperatorPrivilege. Members
>> can administrate the share without problems except when adding an
>> user/adjusting permissions on existing shares. If some file is not owned
>> by the share admins group, I get a "Permission Denied" error. Did I miss
>> something? Shouldn't the SeDiskOperatorPrivilege bypass unix permissions
>> (which seem to be the issue here)?
> The Windows ACLs on a Samba share should work like on a Windows share.
> So what permissions does your 'Share admins' group have on the share?
> There is a special permission that allows changing ACLs (if you haven't
> granted 'full control').
>
> Just granting SeDiskOperatorPrivilege doesn't bring the god-mode :-)