Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[chmavrog]

Hello everyone,

This is my first post in the forum.
1.I have a DNS-345 integrated with my Active Directory.
2.My dns root folder is Volume_1 and it is of RAID-5 TYPE.
3.Also my domain users and domain  groups are shown under Account Management>>User Settings and Account Management>>Group Settings respectively.

Now what i want is to accomplish a a nested tree structure with the appropriate rights per user\group.

Considering the following structure
 ->Volume_1
 -->ERGASIWN
 --->KATHISTERISEIS (nested in ERGASIWN network shared)
 --->EMPLOKES       (nested in ERGASIWN network shared)
 --->OFFICER      (nested in ERGASIWN network shared)
 --->RISK         (nested in ERGASIWN network shared)
 --->PEP         (nested in ERGASIWN network shared)
 
Scenario: UserA needs write\read to KATHISTERISEIS folder(his folder) and
be able to access his folder from windows explorer
by selecting first ERGASIWN folder and then his KATHISTERISEIS folder.

If i give him read permission to ERGASIWN folder then he cannot write to KATHISTERISEIS folder
If i give him read\write permission to ERGASIWN folder then he can read\write to every folder under ERGASIWN folder

I am using the WebUI for granting the permissions to UserA.

Anybody willing to help me?
Am i doing something wrong?

thanks in advance

[JavaLawyer]

It looks like the child directories are inheriting the permissions of the parent directory. If the parent directory has stronger restrictions than the child directories, then the child directories are subject to those limitations.

Here's another approach for configuring User A

• ERGASIWN [Read/Write]
• ERGASIWN > KATHISTERISEIS  [Read/Write]
• ERGASIWN > EMPLOKES [Deny Access or Read]
• ERGASIWN > OFFICER [Deny Access or Read]
• ERGASIWN > RISK [Deny Access or Read]
• ERGASIWN > PEP [Deny Access or Read]

This is more work since every time you add a new directory under ERGASIWIN, you'll need to add the "Deny Access" or "Read" permission to all users depending on what they are entitled to do/see.

[chmavrog]

thanks for the reply i 'll try your workaround.

so when we say that our NAS is intergraded with Active Directory does this mean that we can only have our users\groups in AD, right away in our Account management on the WebGUI OF THE DNS-345 SHARECENTER?

when i expose my shares to the network
i cannot use my OS windows ACL on my shares to change permissions on the shares? (adding removing users\groups) ?