Bad Access Rights

[atz6975]

Hi I recently switched off AFP on a  RN526, mostly used by Mojave Macs. Everybody is now using SMB.

It seems that files created don't respect the group setting : all users belong to a group "design".

When they create files, they are created as "users" group instead of "design".

As a result people cannot share files and update them, they can only create them.

I have "forced" the file ownership for newly created files/directory, reset the ownership : all to now avail.

Shall I log a case? Does anybody know of this?

Thank you for your suggestions.

[Retired_Member]

Dum differtur, vita transcurrit 🙂

[atz6975]

Your comment stands by itself in this case...

[StephenB]

---

@atz6975 wrote:

It seems that files created don't respect the group setting : all users belong to a group "design".

When they create files, they are created as "users" group instead of "design".

If the users are logging in with the "design" account credentials, then I would log a case.  If anonymous access is enabled, then you might want to disable it, just to make sure that they are always using credentials.

A workaround might be to change the NAS accounts so they are all in the "user" group (since you only have one group anyway).

[atz6975]

Each user has its own credentials and is part of "design" group (by default for each new user).

Other users are part of other groups.

My focus is on design users. Their files are created as user_id:users instead of user_id:design.

By default, new files are cretaed with specific following rights : Folder Group, admin, design (group). 

[StephenB]

---

@atz6975 wrote:

Other users are part of other groups.

---

Ok, that wasn't clear to me from your first post.

---

@atz6975 wrote:

Each user has its own credentials and is part of "design" group (by default for each new user).

---

Understood.  But if anonymous access is enabled for the share, then they might sometimes be accessing the NAS w/o credentials.  It'd be good to make sure that isn't happening.

It might be helpful to post the network access and file access screens for one of the shares.