samba - Mar 2002 - Deletion of read-only files

Hi,

I am experiencing great difficulty configuring the following:

1. Users who create files in a share, must have full rights.
2. Other users must be able to all view files, but not edit or delete them, i.e.
everyone has read-only access to all files except those they created themselves
(which they can modify and delete).

The following definition allows the read-only part (files cannot be modified),
but other users can still delete the files! What am I doing wrong?

[Work]
   path = /mnt/store/Work
   writeable = yes
   valid users = +officeusers
   force create mode = 0750
   force directory mode = 0770
   force group = officeusers

________________________________________
Ben van der Merwe
Sun Space & Information Systems (Pty) Ltd.
Stellenbosch, South Africa
http://www.sunspace.co.za
+27 21 880 8100
+27 21 880 1703 (fax)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/ms-tnef
Size: 2428 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20020313/71bf9569/attachment.bin

Ben van der Merwe wrote:
>Hi,
>
>I am experiencing great difficulty configuring the following:
>
>1. Users who create files in a share, must have full rights.
>
>2. Other users must be able to all view files, but not edit or delete them,
i.e. everyone has read-only access to all files except those they created
themselves (which they can modify and delete).
>
>The following definition allows the read-only part (files cannot be
modified), but other users can still delete the files! What am I doing wrong?
>
You should include the sticky bit on the directories.

force directory mode = 2770

find /mnt/store/Work -type d -ok chmod +t {} \;

STICKY DIRECTORIES
       When the sticky bit is set on a directory, files  in  that
       directory may only be unlinked or renamed by root or their
       owner.  (Without the sticky bit, anyone able to  write  to
       the  directory can delete or rename files.) The sticky bit
       is commonly found on directories, such as /tmp, which  are
       world-writable.

>
>
>[Work]
>   path = /mnt/store/Work
>   writeable = yes
>   valid users = +officeusers
>   force create mode = 0750
>   force directory mode = 0770
>   force group = officeusers
>