Departmental share with different user rights.

[roccovdveer]

Hi,

I have got a question I do not seem to be able to solve. I have a share, where at the moment all users have access to.

I know how to give access to one group, but I cannot solve the problems I have with the access to this share. Let me explain the problem:

My share looks like this for example:

Departments (A managers group needs full access to this)
Music (2 users and a group need access)
Technical (1 user and a group need access)
Bookkeeping (only the bookkeeper)

Where Departments is the share name, and Music etc, are the directories under this share.

What I like to accomplish, is that all users can access the (one) share, but can only access (read or write) their own Department (Directory), so if we take for example bookkeeping, the group managers should have full access, and the bookkeeper also ,but all others users should not be able to look into this directory under the Share Departments.

Similarely for the Directory music, the music department group plus the managers group have full access to it, but all other users not, and they should not be able to look into the Directory.

The problem start already at top level, because if you do not have read or right access to the Share, you cannot access the share, but if I give everybody rights, then all users have at least read access to all dirs in the share.

Is this possible? Can anybody tell me how to do this?

 

[lgarner]

You need "rx" permissions on a directory to really do anything. "x" allows you to navigate into the directory, "r" allows you to list files.

ACLs might be what you're looking for to set permissions for multiple groups and users. Normal permissions are strictly for one user, group, and world. Check for information on mounting a partition with ACL support and "setfacl".