Assigning and changing access rights
When to assign or change access rights
After you create a share, you define the user or group access rights to the share. If a group or a user no longer exists, you can remove the corresponding entry from an ACL.
Methods of assigning or changing access rights to a share
To assign access rights, use either of the following methods:
Assigning or changing access rights with Server Manager
To assign or change access rights with Server Manager, use the Access Through Share Permissions window by following these steps.
|
Step
|
Action
|
|---|
|
1
|
Open Server Manager by choosing it from the Start menu.
|
|
2
|
From the Server Manager Computer menu, choose Select Domain.
Result
The Select Domain window opens.
|
|
3
|
In the Select Domain window, select the filer you want by typing its UNC name, for example, \\FILERNAME, in the Domain field, then clicking OK.
Result:
A Server Manager window for the filer appears.
|
|
4
|
In the Server Manager window, click Computer > Shared Directories, then click the Properties button.
Result
The Share Properties window appears.
|
|
5
|
Click Permissions.
Result
The Access Through Share Permissions window appears.
|
|
6
|
To add a new user or group, click Add.
Result
The Add Users and Groups window appears.
|
|
Adding a name with the Add Users and Groups window
|
|
7
|
Click the arrow next to the List Names From field to choose a domain that contains names that you want to add.
Result:
A list of names appears in the Names list box.
|
|
8
|
Specify one or more names in either of the following two ways:
- Click one or more names in the Names list box.
- Type valid user or group names in the Add Names text box.
|
|
9
|
Click Add in the window where you selected the names.
Result
The names are added to the Add Names field of the Add Users and Groups window.
|
|
10
|
If you want, add or modify the access type by selecting one or more names and choosing an access type from the Type of Access list.
|
|
Steps in the Access Through Share Permissions window
|
|
11
|
To assign or change an access type, select a name or names in the Names list, then click the arrow next to Type of Access and select an access type.
|
|
12
|
To remove one or more names from the list, select a name or names in the Names list, then click Remove.
|
|
13
|
Click OK.
|
|
Final step in the Properties window
|
|
14
|
Click OK to put the changes into effect.
|
Giving access with the cifs access command
You use the cifs access command to assign access to a share from the filer command line. To change the permissions, run the command with the new permissions.
Command syntax
The cifs access command has the following syntax:
cifs access share [ -g ] user|group rights
The -g flag specifies that the access rights are defined for a group.
rights can be UNIX-style permissions or Windows NT-style rights:
- UNIX-style permissions are defined as r, w, and x, which mean read, write and delete, and execute and browse, respectively. To deny a right to a user, use a hyphen (-).
- Windows NT-style rights are No Access, Read, Change, and Full Control.
Examples
Here are some examples of assigning access rights from the filer:
- cifs access library -g engineering rwx
- cifs access library domain\joed Change
Note: The group everyone is reserved. When you use it in an ACL, the group everyone means every CIFS user. For example, to give every CIFS user read, write, and execute rights to the library share, you enter the following command:
cifs access library everyone rwx
Removing a user or group with the cifs access -delete command
If a user or group no longer exists, you can remove the corresponding entry from an ACL. Use the following command syntax to remove an entry in an ACL:
cifs access -delete share user | group
Following are some examples of removing entries from the library share.
The following command removes the engineering group from the library share.
cifs access -delete library engineering
The following command removes the user joed from the library share.
cifs access -delete library domain\joed
Copyright © 1999, Network Appliance, Inc. All rights
reserved.
Part No. 210-02334
File: cifs13.htm
Last updated: 02/24/99 12:16:32