samba - Sep 2025 - Regarding User/Group ACLs

Hi,


  1.  I created a user group with user1 and user2 on Active directory.
  2.  Mounted SMB share with RW access to Client1 (logged into as user1).
  3.
Added user group group1(user1 and user2 belong to group1) in write list.
  4.
Add user1 in read list.
  5.
Now when I tried to write SMB share with User1, I was allowed to write.

Could you please let us know shouldn't user access control list override the
user group? in terms of granularity?

Thanks & Regards,
Srikanth NS

On Mon, 15 Sep 2025 08:57:27 +0000
"., Srikanth N S via samba" <samba at lists.samba.org> wrote:
> Hi,
> 
> 
>   1.  I created a user group with user1 and user2 on Active directory.
>   2.  Mounted SMB share with RW access to Client1 (logged into as
> user1). 3.
> Added user group group1(user1 and user2 belong to group1) in write
> list. 4.
> Add user1 in read list.
>   5.
> Now when I tried to write SMB share with User1, I was allowed to
> write.
> 
> Could you please let us know shouldn't user access control list
> override the user group? in terms of granularity?
> 
> Thanks & Regards,
> Srikanth NS
First, you seem to send your posts to 'Kees van Vloten' via the samba
mailing list instead of directly to the list, is there a reason for
this ?

You mention 'active directory' in your question, so I assume that the
SMB server in question is a Samba Unix domain member and if so, you are
doing it wrong, see here:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

and here:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs

Rowland