Nested shares, Share (folder) – SMC Networks Barricade User Manual

Page 24

Advertising
background image

Page 21

administrator

ALWAYS has Read/Write access to ALL shares.

This group cannot be deleted.

The admin user cannot be removed from this group, but

other users may be added or deleted.

Users

admin

This user cannot be deleted.

The admin user is a member of the administrator group,
and therefore has Read/Write access to all shares.

By default, the admin user has no password, but a password

can be assigned. Assigning a password is recommended.

guest

This user cannot be deleted.

The guest user is a member of the everyone group, and so
has the access rights of the everyone group.

The properties of the guest user can NOT be changed.

Nested Shares

The Barricade allows a folder inside a share to be a share. This allows "nesting" of
shares to any depth. If using this feature, remember that:

In Windows' Network Neighborhood, all shares are listed on the same level -

the "nesting" is completely invisible.

When a user accesses a share, they will see only folders, never shares. Users

cannot tell whether or not a sub-folder is in fact a nested share.

Anyone with access to the outer share automatically has the same access rights

to any inner shares. So the most sensitive data must be kept in the outermost
share, not the innermost share. This is illustrated below.

Share (folder)

secret (/secret)

confidential (/secret/sensitive_data)

published (/secret/sensitive_data/publish_data)

If have access, have same access rights to "published"

If have access, have same access rights to "confidential" and
"published"

Figure 7: Nested Shares

Advertising