Changing and displaying file-level ACLs

About file-level ACLs

Permission settings for files and directories are stored in file-level ACLs. These ACLs follow the Windows 2000 NTFS security model. For files that have NTFS-style security, CIFS users can set and display file-level ACLs from their PC. All files in an NTFS-style qtree and some files in a mixed qtree can have NTFS-style security. Files in a UNIX qtree do not have ACLs; they use UNIX permissions.

Permission types in a file-level ACL

Data ONTAP supports all permission types supported by Windows file-level ACLs.

Setting and displaying a file-level ACL

To set and display a file-level ACL, complete the following steps.

Step	Action
1	From the Windows desktop, right-click a file and select Properties from the pop-up menu.
2	Click the Security tab.
3	Click Permissions. Example The following figure illustrates how to change the file-level ACL for a folder in the test2 share by adding LAB\aimee to the ACL.

Step

Action

From the Windows desktop, right-click a file and select Properties from the pop-up menu.

Click the Security tab.

Click Permissions.

Example

The following figure illustrates how to change the file-level ACL for a folder in the test2 share by adding LAB\aimee to the ACL.

Note
On an NT4 client, if you right-click a file that is located in a share that supports wide symbolic links and select Properties, no Security tab is displayed. You can set security using a security tool such as cacls. Alternatively, you can either access files from a Windows 2000 client or access files using shares that don't support wide symbolic links. You can have two different shares on the same directory, one that supports wide symbolic links and one that does not, and use the share that does not support wide symbolic links when setting security.