Permission Components

Windows 2008 R2 behaviour over smb

Windows 2008 R2 behaviour locally

Samba 3.6.1 behaviour with vfs_acl_tdb

Samba 3.6.1 behaviour with vfs_acl_xattr

Traverse Folder / Execute File

User can traverse through folder User have to enable additional permission s Read attributes, Read extended attributes, Read permission s When disabled, user cant see directory When disabled, user cant see directory User is able to create files User is able to create directories User is able to change attributes User is able to change extended attributes

User can traverse through folder

User have to enable additional permission List folder / read data to traverse through folder

User have to enable additional permission List folder / read data to traverse through folder

List Folder / Read Data

User can List folder / Read data

User can List folder / Read data

User can List folder / Read data

Read Attributes

User can not change attributes

does not work (seems that it is always enabled)

does not work (seems that it is always enabled)

Read Extended Attributes

User can not change extended attributes User is able to copy files User is able to create directories User is able to change attributes User is able to change extended attributes

does not work (seems that it is always disabled)

does not work (seems that it is always disabled)

Create Files / Write Data

User is able to create files User is able to create directories does not work (attributes are mapped by smb.conf) does not work (seems that it is always disabled)

User is able to create files User is able to create directories does not work (attributes are mapped by smb.conf) does not work (seems that it is always disabled)

Create Folders / Append Data

Write Attributes

Write Extended Attributes

Delete Subfolders and Files

User is able to remove Subfolers and Files

User is able to remove Subfolers and Files

does not work user cannot remove or change Subfolders, only files can be changed/ removed User is able to remove subfolders, files and parent directory

does not work user cannot remove or change Subfolders, only files can be changed/ removed

Delete

User is able to remove subfolders, files and parent directory

User is not able to remove parent directory When disabled, user cannot read permissions from Security tab, also user cannot create files from context menu eg. New -> Text document User is able to change permissions on parent directory User is not able to change ownership without Administrator password

User is able to remove subfolders, files and parent directory

Read Permissions

When disabled, user cant see directory

When disabled, user cannot read permissions from Security tab, but user is able to create files and folders from context menu

When disabled, user cannot read permissions from Security tab, but user is able to create files and folders from context menu

Change Permissions

User is able to change permission s on parent directory User is able to change ownership of parent directory, subfolders and files

User is able to change permissions on parent directory

User is able to change permissions on parent directory

Take Ownership

User is able to change ownership of parent directory, subfolders and files

User is able to change ownership of parent directory, subfolders and files