 |
» |
|
|
 |
The HP CIFS Server A.01.07, and subsequent versions, allow Windows 2000/XP clients to view and set POSIX ACL permissions. The information in this section assumes you are familiar with Windows 2000/XP permissions. The purpose of this section is to explain how the HP CIFS Server interprets Windows 2000/XP permissions, and how Windows 2000/XP clients interpret and display HP-UX permissions. Windows 2000/XP clients interact with POSIX ACLs similar to Windows NT clients, except for the minor differences covered in the following sections. Learn more about ACLs and Windows 2000/XP clients in the folowing sections in this chapter. You can also learn more about POSIX ACLs with man aclv. Viewing UNIX Permissions from Windows 2000/XP Clients |  |
The following table shows how the UNIX permissions on the HP CIFS Server are mapped to permissions on Windows 2000/XP clients' Basic and Advanced ACL views: Table 3-4 UNIX Permission Maps Windows 2000/XP Client Permissions | UNIX Permission | Permission Shown on Windows 2000/XP Clients |
|---|
| Basic View | Advanced View | | r-- | Read | Read Attributes, Read Extended Attributes, Read Data, Read Permissions | | -w- | Write | Write Attributes Write Extended Attributes, Append Data, Write Data, Read Permissions | | --x | None | Execute or Traverse Folder, Read Attributes, Read Permissions | | r-x | Read and Execute | All Read Permissions as in the first cell Execute or Traverse Folder | | rw- | Read, Write | All Read Permissions as in the first cell All Write Permissions as in the second cell | | rwx | Full Control | Full Control and All permission bits are ticked | | --- | No boxes are ticked | None |
Setting Permissions from Windows 2000/XP Clients |  |
The following table shows how each Windows 2000/XP client permission is mapped to the UNIX permission when permissions are set from a client: Table 3-5 Windows 2000/XP Permissions Maps UNIX Permissions | Windows 2000/XP | UNIX Permission |
|---|
| Full Control | rwx | | Write | -w- | | Modify | rwx | | Read and Execute | r-x | | Read | r-- | | List Folder / Read Data (Advanced) | r-- | | Read Attributes (Advanced) | r-- | Read Extended Attributes (Advanced) | r-- | Read Permissions (Advanced) | r-- | Create Files / Write Data (Advanced) | -w- | Create Folder / Append Data (Advanced) | -w- | Write Attributes (Advanced) | -w- | Write Extended Attributes (Advanced) | -w- | Traverse Folder / Execute File (Advanced) | --x | | Delete Subfolders and Files (Advanced) | No meaning on HP-UX | | Delete (Advanced) | * see explanation following table | Change Permissions (Advanced) | * see explanation following table | | Take Ownership (Advanced) | * see explanation following table |
* The Delete, Change Permissions, and Take Ownership permissions represent the file and group ownership. You can only see these permissions, but you cann't set them from Windows 2000/XP clients. When the file permission is not set to Full Control, the Delete, Change and Take Ownership permissions are shown for the file owner. Take Ownership permission is shown for the file owning group. Everyone and other ACEs do not show these permissions except when the permission is set to Full Control.  |  |  |  |  | NOTE: The Windows 2000 permissions labeled Advanced in the table above can be viewed from the ACL dialog box by clicking on Advanced, then View/Edit.The CIFS Server ensures that at least "read" permission is set for the file owner. For example, if a user tries to set a file's permissions to "- - -", the CIFS Server will actually set it to "r - -". |  |  |  |  |
Viewing ACLs from Windows 2000 Clients |  |
Right-click on a file and select Properties Click on the Security tab
Displaying the Owner of a File |  |
Click on Advanced Click on the Owner tab on the Access Control Settings dialog box
|