Samba share access permissions not making sense

---

Digsy wrote:

 

Any thoughts, anyone?

---

Without more details on your settings, we can't offer much advice.

There are File Permissions (which apply to all protocols - in your case both FTP and SMB), and there is Network Access, which needs to be set up separately for each protocol.  Both need to be set up to allow access, but either can result in denied access.

My general advice here is to set up the File Permissions so that everyone can access the underlying files.  Then control access with Network Access alone.  That is generally simpler.

In your specific case with denied access.  I suggest starting by resetting the file permissions for the share, and see if that allows you to access the files over SMB.  Check the box next to "Grant rename and delete privileges" before you click on the reset control. The CCTV system might be using very restrictive file permissions when it creates the files - resetting the permissions will change that so they match the configuration on the share. 

For your test share, try creating a test account, and put it in test group (not users).  Then try enabling read-only network access to the test group, but no access to the users group.   Also set read/write access for the test account, but not for the CCTV account.  Then see if that allows access when you access the NAS with the test account credentials, but denies access when you use the CCTV account credentials.

You do need to be careful when testing share access with Windows, as it often isn't applying the user credentials that you think it is.  So if you are using Windows, then I suggest testing access directly with the windows command line.  You launch this by typing CMD in the windows search box.

Test access to a share by entering

net use * /delete /y
net use t: \\nas-ip-address\sharename /user:username password

using actual values instead of the blue placeholders of course.  Be careful on the typing - particularly with spaces and the slash directions.

The first command terminates any open SMB sessions in the PC, the second attempts to mount the NAS share as drive letter T.  If you want to test with multiple NAS accounts, make sure you enter the both commands every time.