Nikos Zaharioudakis
2016-Jun-09 17:12 UTC
[Gluster-users] Samba permissions in file tree & inheritance with MS Active Directory
Dear list, I am looking for some pointers on this : To my knowledge in Windows it is feasible to have a directory tree like z:\share\projects\customers\big_customer_A\documentation where user jsmith has explicit access only in the documentation directory. He can click through his file browser one step deeper every time just to find share --> projects --> customers --> big_customer_A --> documentation. All the previously mentioned directories may have other files or directories which he cannot even "see".He can only find the next available directory just to go a one step deeper at a time. Is it something which is achievable with gluster + Samba4 packages in an MS Active directory integration ? Thanks in advance, Nikos -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.gluster.org/pipermail/gluster-users/attachments/20160609/192fcc7a/attachment.html>
Diego Remolina
2016-Jun-09 17:21 UTC
[Gluster-users] Samba permissions in file tree & inheritance with MS Active Directory
Probably not really a specific gluster issue, but yes, you can do that with extended acls. You will declare spefic execute only permission for that user in all directories above documentation and in documentation itself it should be read/execute if you only want him to read or rwx if you want him to write. The only thing pertaining glusterfs is that the filesystem backend must support and be mounted with extended ACLs. Do a search for setfacl and getfacl HTH, Diego On Thu, Jun 9, 2016 at 1:12 PM, Nikos Zaharioudakis <nzahar at gmail.com> wrote:> Dear list, > > I am looking for some pointers on this : > > To my knowledge in Windows it is feasible to have a directory tree like > > z:\share\projects\customers\big_customer_A\documentation > > where user jsmith has explicit access only in the documentation directory. > He can click through his file browser one step deeper every time just to > find share --> projects --> customers --> big_customer_A --> documentation. > All the previously mentioned directories may have other files or directories > which he cannot even "see".He can only find the next available directory > just to go a one step deeper at a time. Is it something which is achievable > with gluster + Samba4 packages in an MS Active directory integration ? > > Thanks in advance, > > Nikos > > > _______________________________________________ > Gluster-users mailing list > Gluster-users at gluster.org > http://www.gluster.org/mailman/listinfo/gluster-users