OS 6 - RN516 - use SSH to edit SMB / Windows permissions?

Why not reset them from the OS6 GUI? or SSH?

The GUI is horrible. I can reset the top level folder to a custom user/group setting but that's it. If I hit reset, it resets it to a setting I do not want.

I can use chown -R, chgrp -R, and chmod to do a blanket change of owner and group on folders, but I don't know how to do more complicated permissions than that in SSH.

Using generic names for folders: I need to have the "sales" folder have full control for the "sales_associates" group, and any subfolders and files should have that. Then "sales Austin" should have full access for "sales_associates" group and also full access for "sales_associates_austin" group, etc.

Can that be done in SSH? It would save me a lot of time and grief. Even if that can't be done, if I could somehow reset it to always inherit on the folder level and on any subfolders that would go a long way. Every file I migrated over has individual permissions (except the ones I've fixed so far).

Thanks

Well even when I do set the permissions the hard way through windows, they are not working correctly. Everyone's primary group is Domain Users, but if I put another group as having full access (e.g. "sales_associates" group on the "sales" folder), users who are in that group do not have full access. It completely ignores that they're in the group, or ignores that the group has full access.

So far as permissions go this OS 6 is a pretty sad downgrade. Is there a way I can just put the old OS 5 on this RN 516?

Ok, well I think I fixed the constant cascading of every permission. I avoided changing the permissions on the share level folder. Unfortunately it is still completely ignoring the permissions I set through windows.

I think I might have figured out the problem. In the SMB tab I had everyone set to read only. This, apparently, overrides the windows-set permissions. Also, changing permissions on the share level ruins inheritance. So I reset permissions to rw/rw/r on the security page, and put "everyone" as read/write on the SMB tab. The security tab prevents people from taking ownership (which is what I was trying to do on the SMB tab). The SMB must be wide open or have explicit read/write assigned to anyone who will need read/write lower down.

Consequently, these are the default settings for the SMB and Security tabs. But you must login as the domain admin to set basic permissions at the top level *subfolder* under the share for domain admins or something of that sort in order to have quality control over the content and permissions.