NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
What is the Differenece between Network Access and File Access when using SMB
The Subject tells it all. I would like a brief explination as to what affect the Network Access and the File Access have inside an SMB system. I do not understand the differenece between the two of t...
siigna wrote:
File permissions are traditional UNIX permissions, effective permissions are ordered by user, group, then others.
- ie. if I have a user with no access rights to a folder and they are in group A and group A has rights to that folder do they then Have rights to that folder?
In this situation the user would have no rights to the folder. Other members of group A would have rights. Regardless of others rights (you didn't mention them), the user would have no rights.
Meaning that any user rights you specify trump the group rights, not the other way around.
File permissions + network access both need to allow access, otherwise it is denied.
In most cases its easier to set the files to allow full access by anyone, and manage access through network security.
So what use is the File Access if the only person with direct access to the files is the admin through the web interface?
Also, How do you remove a user from a access list so that they can default to a group permission?
PatrickH wrote:
So what use is the File Access if the only person with direct access to the files is the admin through the web interface?
Well, you could set specific files to read-only while leaving the share read/write.
Yes, But why do that in File Access if File Access is only really usefull for local users on the NAS since there is only one account the admin that has direct access to the files through the webserver. What would the benifit of that be?
PatrickH wrote:
Yes, But why do that in File Access if File Access is only really usefull for local users on the NAS since there is only one account the admin that has direct access to the files through the webserver. What would the benifit of that be?
I get that this distinction can be confusing, but it is standard practice to expose both. Windows sharing does precisely the same thing (distinguishing network access from file access), and most windows PCs also only have one user account. Actual access rights are intersected (the most restrictive settings win).
Where it can be useful is when there is a default file-access policy with some exceptions that are fine grained. Then you can set the default policy for the share (either read-write, or perhaps read-only), and then apply the exceptions manually.
File access settings can also be preserved when the files are copied (for instance in rsync backups to USB disks) - which also is useful for some people. Network access cannot be preserved.
And it can be very useful to reset the file access rights for every file/folder in the share back to the default (since you cannot prevent users from changing permissions on their files, and sometimes that does mess things up).
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
