nas_permmissions_in_omv

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
Last revisionBoth sides next revision
nas_permmissions_in_omv [2021/02/24 00:40] – [A Restricted Share] crashtestnas_permmissions_in_omv [2021/04/27 21:37] – [NAS Permissions In OMV] crashtest
Line 1: Line 1:
-{{ :underconstruction.jpg?400 |}} 
- 
- 
 <html><center><strong>Getting Started with:</strong></center></html> <html><center><strong>Getting Started with:</strong></center></html>
  
Line 8: Line 5:
  
  
-====== NAS Permissions In OMV - A Primer ======+====== NAS Permissions In OMV ======
 \\  \\ 
 \\  \\ 
-If preferred, this document is available in PDF form at this location → [[https://github.com/OpenMediaVault-Plugin-Developers/docs/blob/master/Getting_Started-Permissions.pdf|Getting Started - Permissions]]+This document can be converted to a PDF file, in the user's language of choice (see the following), on Windows, Mac's and popular Linux desktop platforms. Simply select the printer icon on the upper right corner of this web page. When prompted at the client, select “print to PDF”, name and save the file.\\ 
 +\\ 
 +[[https://translate.google.com/|Google Translate]] kann Wiki-Dokumente in Ihre Sprache übersetzen. Fügen Sie die Wiki-URL in das linke Fenster ein und öffnen Sie den übersetzten Link rechts.\\ 
 +[[https://translate.google.com/|Google Translate]] puede traducir documentos wiki a su idioma. Pegue la URL de la wiki en la ventana izquierda y abra el enlace traducido a la derecha.\\ 
 +[[https://translate.google.com/|Google Translate]] peut traduire des documents wiki dans votre langue. Collez l'url du wiki dans la fenêtre de gauche et ouvrez le lien traduit sur la droite.\\ 
 +[[https://translate.google.com/|Google]]翻訳はwikiドキュメントをあなたの言語に翻訳することができます。 左側のウィンドウにwikiのURLを貼り付け、右側の翻訳されたリンクを開きます。\\
 \\ \\
 ---- ----
Line 138: Line 140:
   * If the SMB **Public** field is set to “**Guests Allowed**”, that would combine with the “**Test**” Shared Folder permission **Others – Read**, to allow network guests **Read** access.  (These permissions; **Others – Read** in the Shared Folder and **Guests Allowed** in Samba are appropriate for a media share.  Network guests would have read access to media, music, movies, etc.)   * If the SMB **Public** field is set to “**Guests Allowed**”, that would combine with the “**Test**” Shared Folder permission **Others – Read**, to allow network guests **Read** access.  (These permissions; **Others – Read** in the Shared Folder and **Guests Allowed** in Samba are appropriate for a media share.  Network guests would have read access to media, music, movies, etc.)
   * Beyond **Public access** choices, Samba assumes that appropriate user permissions have been assigned to the bottom layer, at the Shared Folder level.    * Beyond **Public access** choices, Samba assumes that appropriate user permissions have been assigned to the bottom layer, at the Shared Folder level. 
-  * As shown below, if **Read only** is **ON** (green), **users** with **write** access to the Shared Folder, will not be able to add (write), modify or delete files.  (There are exceptions.  More on that later.)\\ +  * If **Read only** is **ON** (green), **users** with **write** access to the Shared Folder, will not be able to add (write), modify or delete files.  (There are exceptions.  More on that later.)\\ 
 \\ \\
 ---- ----
Line 153: Line 155:
   * Many consumer routers do not consistently map host names to IP address which may make “allow” or “deny” by host name inconsistent.\\   * Many consumer routers do not consistently map host names to IP address which may make “allow” or “deny” by host name inconsistent.\\
 \\  \\ 
-For these reasons and more, host entries should not be used without closely considering their effects.\\+For these reasons and more, host entries should NOT be used without closely considering their effects.\\
 \\  \\ 
 {{ :9-perms-samba-share2.jpg?400 |}} {{ :9-perms-samba-share2.jpg?400 |}}
Line 159: Line 161:
 **Extra options:**  This field presents home and small business administrators with some interesting options for share administration.  For example, in the upper half of this Samba dialog box, there is the option for **Read only**.  In a Samba share, the **Read only switch** will further restrict the group **users** to **read only** access, even if the Shared Folder below allows **write** access.\\  **Extra options:**  This field presents home and small business administrators with some interesting options for share administration.  For example, in the upper half of this Samba dialog box, there is the option for **Read only**.  In a Samba share, the **Read only switch** will further restrict the group **users** to **read only** access, even if the Shared Folder below allows **write** access.\\ 
 \\ \\
-However a “**write list**” will allow an administrator to selectively bypass the Samba **Read only** switch.  In this case if the statement **''write list=Fred''**  is added to the **Extra Options** field, the user **Fred** will have **write** access while the rest of the group **users** will still be restricted to **Read only**, enforced by Samba's **Read only switch**.\\ +However a “**write list**” will allow an administrator to selectively bypass the Samba **Read only** switch.  In this case if the statement **''write list=Fred''**  is added to the **Extra Options** field, the user **Fred** will have **write** access while the rest of the Group **users** will still be restricted to **Read only**, enforced by Samba's **Read only switch**.\\ 
 \\ \\
-The same could be done for the entire users group with **''write list=@users''**   +The same could be done for the Group **users**  with **''write list=@users''**   
-Adding this statement would allow the entire users group, over the network, **write** access while restricting **Others** with the **Read only switch**.\\ +Adding this statement would allow the entire Group **users**, **write** access while restricting **Others** with the **Read only switch**.\\ 
 \\  \\ 
 ---- ----
Line 219: Line 221:
 {{ :13-perms-example1.jpg?600 |}} {{ :13-perms-example1.jpg?600 |}}
 \\ \\
-  * In the Shared Folder, the group **users** have **write**.  This is necessary so that **Fred**, who is the family server administrator, can **write** to the share.+  * In the Shared Folder, the group **users** have **write**.  This is necessary so that **Fred**, who is the family server administrator, can **write** to the share from his client.
   * Samba Public access is set to **Guests allowed** which works with the Shared Folder permission **Others: Read**   These permissions and Samba settings will allow visitors **read** access to media shares such as music or movies.   * Samba Public access is set to **Guests allowed** which works with the Shared Folder permission **Others: Read**   These permissions and Samba settings will allow visitors **read** access to media shares such as music or movies.
   * **Read Only is ON**.  This will further restrict the Group users down from **Write** to **Read only** access.  With young children accessing a share, **Read only** is a good idea to prevent the possibility of an accidental deletion of media files.   * **Read Only is ON**.  This will further restrict the Group users down from **Write** to **Read only** access.  With young children accessing a share, **Read only** is a good idea to prevent the possibility of an accidental deletion of media files.
-  * The Samba **''write list''** bypasses the Samba **Read Only** setting for one user, allowing **Fred** to **write** to the share for admin purposes.\\+  * The Samba  **''write list''**  bypasses the Samba **Read Only** setting for one user, allowing **Fred** to **write** to the share for admin purposes.\\
 \\ \\
 === A Group Share === === A Group Share ===
Line 246: Line 248:
 {{ :14-perms-example3.2.jpg?600 |}} {{ :14-perms-example3.2.jpg?600 |}}
 \\ \\
-After selecting group usernames for No access (or **Read-only**) it's important to turn **Recursive ON** (green), before clicking the **Apply** button.  This insures that new permissions are written to all files and folders within the share.\\+After selecting group usernames for **No access** (or **Read-only**) it's important to turn **Recursive ON** (green), before clicking the **Apply** button.  This insures that new permissions are written to all files and folders within the share.\\
 \\ \\
 **Note:**\\ **Note:**\\
Line 263: Line 265:
 {{ :15-perms-example4.2.jpg?600 |}} {{ :15-perms-example4.2.jpg?600 |}}
 \\ \\
 +----
 ===== The Bottom Line ===== ===== The Bottom Line =====
 \\ \\