Understanding qtree creation

Understanding qtree and volume security styles

About security styles

Every qtree and every volume has a security style setting. This setting determines whether files in a qtree can use Windows NT or UNIX security.

Security styles

Three security styles apply to qtrees and volumes. They are described in the following table.

Security style	Description	Effect of changing to the style
NTFS	Exactly like Windows NT NTFS: files and directories have Windows NT file-level permission settings. Note To use NTFS security, the filer must be licensed for CIFS.	If the change is from a mixed qtree, Windows NT permissions determine file access for a file that had Windows NT permissions. Otherwise, UNIX-style permission bits determine file access for files created before the change. Note If the change is from a CIFS filer to a multiprotocol filer, as described in Parameters to accept or change after volume creation, and the /etc directory is a qtree, its security style changes to NTFS.
UNIX	Exactly like UNIX: files and directories have UNIX permissions.	The filer disregards any Windows NT permissions established previously.
Mixed	Both NTFS and UNIX security are allowed: a file or directory can have either Windows NT permissions or UNIX permissions. The default security style of a file is the style most recently used to set permissions on that file.	If NTFS permissions on a file are changed, the filer recomputes UNIX permissions on that file. If UNIX permissions or ownership on a file are changed, the filer deletes any NTFS permissions on that file.

Security style

Description

Effect of changing to the style

NTFS

Exactly like Windows NT NTFS: files and directories have Windows NT file-level permission settings.

Note
To use NTFS security, the filer must be licensed for CIFS.

If the change is from a mixed qtree, Windows NT permissions determine file access for a file that had Windows NT permissions. Otherwise, UNIX-style permission bits determine file access for files created before the change.

Note
If the change is from a CIFS filer to a multiprotocol filer, as described in Parameters to accept or change after volume creation, and the /etc directory is a qtree, its security style changes to NTFS.

UNIX

Exactly like UNIX: files and directories have UNIX permissions.

The filer disregards any Windows NT permissions established previously.

Mixed

Both NTFS and UNIX security are allowed: a file or directory can have either Windows NT permissions or UNIX permissions.

The default security style of a file is the style most recently used to set permissions on that file.

If NTFS permissions on a file are changed, the filer recomputes UNIX permissions on that file.

If UNIX permissions or ownership on a file are changed, the filer deletes any NTFS permissions on that file.