7 configuring file and folder security and acl – PLANET NAS-3410 User Manual

Page 48

Advertising
background image

40

6.7 Configuring File and Folder Security and ACL

Access Control Lists (ACL) are associated with each file and folder, as well as the list of users

and groups permitted to use that file or folder. When a user is granted access to the file or folder,

an ACL node is created and added to the ACL for the file or folder.

If you assign permissions to a local user, a Security ID (SID) created by NAS-3410 will be referred

by the ACL for the file and folder security. If the local user is then deleted, and the same name is

created as the previous one, the new user does not have permissions to the file or folder, because

the SID will not be the same. The administrator will have to re-configure all the group

memberships and access rights to the files and folders.

Since the Security ID (SID) for domain user is issued and maintain by the domain controller on the

network. Administrator do not need to re-configure all the group memberships and access rights to

the files and folders if the domain user is deleted from the local user database and the same

name is created as the previous one.

There are two built-in user accounts: Admin and Guest. And two built-in group accounts: Admins

and Everyone.

Every user of NAS-3410 including local and Domain user is the member of the Everyone group.

By default, when a volume is created, Admins and Admin will be granted Full Control permission

and Everyone will be granted Read/Write permission to the volume.

After you set permissions on a volume, all the new files and folders created under the volume

inherit these permissions. If you do not want them to inherit permissions, uncheck the Inherit

from parent folder when you set up the permissions for the files and folder.

Configuring file and folder security:

1. By default, ACL control is enabled.

2. Go to Security

ÆFile/Folder menu.

3. Locate the file or folder you want to configure the permission.

4. Click the

icon. If the icon is disabled, go to Security

ÆACL menu to enable the ACL

Control.

5. Clear the Inherit from parent folder check box.

6. Select the users or groups from the left hand windows and click the >> button to join the

privileged user/group list.

7. If you want all the subfolders and files inherit the new permission you have just set, check

the Propagate to all subfolders and files check box.

8. Click Apply to save the setting.

You can assign the following File/Folder permission to a user on NAS-3410:

Advertising