[Samba] Fileshare - how to enable Modify permission for an rwx-enabled file

[Mgr. Peter Tuharsky]

Thank You, Rowland.

I have already read that. According to chapter File System Support, does
that imply, that Samba could also well never grant Modify permission for
linux ACLs? Do I need extended ACLs on filesystem in order to do that? I
thought, that write permission on filesystem should be sufficient for
Samba to grant Modify for Windows...

As of smb.conf, here is snippet

[pripomienkovanie]

   path = /mnt/data_disk/www/pripomienkovanie/
    dos filetime resolution = yes
    writable = yes
    read only = no

    preserve case = yes
    create mask = 775
    directory mask = 2775

    oplocks = false
    level2oplocks = false


Dňa 16. 11. 2018 o 11:28 Rowland Penny via samba napísal(a):
> On Fri, 16 Nov 2018 10:03:08 +0100
> "Mgr. Peter Tuharsky via samba" <samba at lists.samba.org> wrote:
>
>> Hi,
>>
>> I'm searching the web for a while but cannot find an answer to this,
>> even on Samba wiki, so please, does somebody have a clue, how to
>> enable MODIFY access permission for a file that is located on Samba
>> share?
>>
>> The fileserver is Samba, member of AD domain, local filesystem ext4,
>> basic ACLs. The file has properly set rwx for users and groups needed,
>> both for a file and for parent directory. However, for Windows 10 /
>> Windows 2016, the file Properties - Security tab reports only Read &
>> Execute, Read, Write, Special permissions rights for the said
>> users/groups. The Modify permission is NOT SET. In effect, when the
>> user opens the file in Office app, he gets "file is read only"
>> warning. OTOH, user can create new files in directory.
>>
>> We haven't had such problem with samba 4.2 fileserver, member of NT4
>> domain.
>>
>> Has the ACL translation model changed since? Or what might be a
>> culprit? What should I do to make samba enable Modify permission for
>> RWX-enabled files?
>>
>>
>>
> Have you read this wiki page:
>
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
>
> It might also help if you post your smb.conf
>
> Rowland
>