Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP CIFS Server 3.0g Administrator's Guide version A.02.03.01: HP-UX 11i v1, v2 and v3 > Chapter 3 Managing HP-UX File Access Permissions from Windows NT/XP/2000

POSIX ACLs and Windows 2000/XP Clients

» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Glossary

 » Index

The HP CIFS Server A.01.07, and subsequent versions, allow Windows 2000/XP clients to view and set POSIX ACL permissions. The information in this section assumes you are familiar with Windows 2000/XP permissions. The purpose of this section is to explain how the HP CIFS Server interprets Windows 2000/XP permissions, and how Windows 2000/XP clients interpret and display HP-UX permissions.

Windows 2000/XP clients interact with POSIX ACLs similar to Windows NT clients, except for the minor differences covered in the following sections. Learn more about ACLs and Windows 2000/XP clients in the folowing sections in this chapter. You can also learn more about POSIX ACLs with man aclv.

Viewing UNIX Permissions from Windows 2000/XP Clients

The following table shows how the UNIX permissions on the HP CIFS Server are mapped to permissions on Windows 2000/XP clients' Basic and Advanced ACL views:

Table 3-4 UNIX Permission Maps Windows 2000/XP Client Permissions

UNIX Permission

Permission Shown on Windows 2000/XP Clients

Basic ViewAdvanced View
r--Read Read Attributes, Read Extended Attributes, Read Data, Read Permissions
-w-Write

Write Attributes Write Extended Attributes, Append Data, Write Data, Read Permissions

--xNoneExecute or Traverse Folder, Read Attributes, Read Permissions
r-xRead and Execute

All Read Permissions as in the first cell

Execute or Traverse Folder

rw-Read, Write

All Read Permissions as in the first cell

All Write Permissions as in the second cell

rwxFull Control

Full Control and All permission bits are ticked

---No boxes are ticked

None

 

NOTE: In the table above, the permissions labeled Advanced can be viewed from the ACL dialog box by clicking on Advanced, then View/Edit.

For a file owner ACE, Take Ownership, Delete and Change permissions flags are shown. For a file's owning group ACE, Take ownership permission flag is shown.

However, all permissions are ticked in both Windows ACE Advanced and Basic views if a file permission is Full Control.

Setting Permissions from Windows 2000/XP Clients

The following table shows how each Windows 2000/XP client permission is mapped to the UNIX permission when permissions are set from a client:

Table 3-5 Windows 2000/XP Permissions Maps UNIX Permissions

Windows 2000/XP UNIX Permission
Full Controlrwx
Write-w-
Modifyrwx
Read and Executer-x
Readr--
List Folder / Read Data (Advanced)

r--

Read Attributes (Advanced)

r--

Read Extended Attributes (Advanced)

r--

Read Permissions (Advanced)

r--

Create Files / Write Data (Advanced)

-w-

Create Folder / Append Data (Advanced)

-w-

Write Attributes (Advanced)

-w-

Write Extended Attributes (Advanced)

-w-

Traverse Folder / Execute File (Advanced)

--x

Delete Subfolders and Files (Advanced)

No meaning on HP-UX

Delete (Advanced)

* see explanation following table

Change Permissions (Advanced)

* see explanation following table
Take Ownership (Advanced)* see explanation following table

 

* The Delete, Change Permissions, and Take Ownership permissions represent the file and group ownership. You can only see these permissions, but you cann't set them from Windows 2000/XP clients.

When the file permission is not set to Full Control, the Delete, Change and Take Ownership permissions are shown for the file owner. Take Ownership permission is shown for the file owning group. Everyone and other ACEs do not show these permissions except when the permission is set to Full Control.

NOTE: The Windows 2000 permissions labeled Advanced in the table above can be viewed from the ACL dialog box by clicking on Advanced, then View/Edit.The CIFS Server ensures that at least "read" permission is set for the file owner. For example, if a user tries to set a file's permissions to "- - -", the CIFS Server will actually set it to "r - -".

Viewing ACLs from Windows 2000 Clients

  1. Right-click on a file and select Properties

  2. Click on the Security tab

Viewing ACLs from Windows 2000 Clients

Displaying the Owner of a File

  1. Click on Advanced

  2. Click on the Owner tab on the Access Control Settings dialog box

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 2007 Hewlett-Packard Development Company, L.P.