samba - Dec 2010 - File Permissions 770 vs 760

I hope I did not miss something obvious, but I am having some file
permission issues. I am running Ubuntu 10.04 LTS Server. I have some
directories served up by Samba. I force a group name to be used for all
files created on these directories to which all users belong.

In one directory I need to force users to save files with 770 permission for
draft documents so that other users can work on them When finally ready to
publish the document, one of the users will save a copy with the permissions
set to 550 to maintain an archive of the file at that point in time.

My problem is if I use "create mode = 770", WinXP users can only
manage a
760 permission setting,. That will not allow someone else in the group to
set the file to readonly from WinXP though. If I use "force create mode
770" I cannot set the file to readonly from the WinXP client as it will
always be forced to be editable.

Any suggestions?

Fred Legace wrote:
> I am running Ubuntu 10.04 LTS Server.
<snip>
> My problem is if I use "create mode = 770", WinXP users can only
manage a
> 760 permission setting. That will not allow someone else in the group to
> set the file to readonly
Well, I just checked a couple of recently created files from a WinXP client
machine on our Ubuntu 10.04 LTS server. Quite dismayed at what I find!

First off, this is our share:

[data]
    comment = Shared Application Data Files
    path = /srv/shares/data
    guest ok = no
    read only = no
    create mask = 0666
    directory mask = 0777

Wide open public dumping ground for data files! ;-)

New directory, no surprises:

drwxrwxrwx+  2 mdlueck mdlueck    4096 2010-12-30 09:14 2010

New files, however...

-rwxrwxrwx+  1 klueck  klueck   226247 2010-12-30 15:16
-rw-rwxrw-+  1 klueck  klueck   379849 2010-12-30 15:16

No idea why ACL's are getting on the files.

No idea why new files end up totally / partially executable.

GREAT!!!!! :-(

-- 
Michael Lueck
Lueck Data Systems
http://www.lueckdatasystems.com/