Setting permissions per specific users and folders for access from OSX

[mcg]

Setting permissions per specific users to certain folders

Hello all,

Got a few questions regarding our network sharing.

Here is the setup, we have a "server" running Windows 7 Ultimate 64-bit. This server has a RAID setup with a shared folder containing projects.

These projects need to be accessed by certain users, but should limited to certain folders.

Ideal situation: Username and password for networked computers that are dedicated to each user, upon connecting to the server using OS X or Windows 7 with these credentials are dumped within a project folder but no access to the parent directory. One user will have access to the entire parent directory.

Currently we have one 7 machine accessing via homegroup, which I cannot seem to limit access. We also have ~5 OS X machines running Snow Leopard or Lion, 10.6 and 10.7 respectively. All machines, excluding the other 7, connect as "Guest" currently with no password and have access to all files.

I can't seem to create Usernames with Passwords from the permissions properties. Within this dialog you can only see users, objects and locations. When trying to add a username, receive error stating the user does not exist.

When trying to click Add here,

Same result.

Any help is greatly appreciated.

 

[Arc]

Welcome aboard, mcg !

Maybe it is not a relevent information, but as far as I know, windows use NTFS which is not usually accessed by MacOS, which uses Mac OS x Journaled formatting.

There are some programs likes Paragon NTFS for Mac OS X software to access NTFS partitions from a Mac.

May it be a helpful information ? I am not totally sure.

 

[chev65]

The first link below explains the process of sharing with a single User or group.

Share Libraries or Folders Using Advanced Sharing | 7 Tutorials

The second link explains how to add a standard User account so that the User Name will show up on your machine to allow for this type of sharing. This is how you get the User to show up on the list so you can choose them to set up the single person shares.

http://www.sevenforums.com/tutorials/2974-user-accounts.html?filter

As for sharing between the MAC and Windows 7, you will have to check out the countless Youtube video's about how to do this. Example> Share files between Mac OSX and Windows 7 - Lucid Nerd Tutorial - YouTube

 

[mcg]

Thanks for the welcome and also for the quick replies guys.

I don't have a problem communicating between OS X and Seven for sharing currently. We have a couple OS X machines accessing with no problem, just want to limit their access.

The first link provided by chev65 is definitely helpful and I these are the properties I am playing around with. However in step

http://www.7tutorials.com/files/img/sharing_advanced/sas8.jpg (can't post w/ IMG tags for some reason?)

This may be helpful in regards to limiting the Homegroup for the only other computer running Seven. But, what I would like to do is setup a user with password for permissions to a certain directory. Here is an example situation

Username "John" is added under that same dialog box posted in the picture above. Password is set to "123" and John is given access to folder named "A" under the Projects folder. John connects via OS X using "Connect to server" and types "smb:\\servername" as the server and is asked for credentials. He types in John and 123, and is dumped to folder "Projects/A". Under Projects are other Projects, A, B, C, etc. He cannot go up a directory to this main parent, but only has access to A. Other users with same setup may be given access to B, but not A, or A & B or all files under Projects.

Is it possible to setup users like this? If not, what other options do I have?

Repped

 

[chev65]

Thanks for the welcome and also for the quick replies guys.

I don't have a problem communicating between OS X and Seven for sharing currently. We have a couple OS X machines accessing with no problem, just want to limit their access.

The first link provided by chev65 is definitely helpful and I these are the properties I am playing around with. However in step

http://www.7tutorials.com/files/img/sharing_advanced/sas8.jpg (can't post w/ IMG tags for some reason?)

This may be helpful in regards to limiting the Homegroup for the only other computer running Seven. But, what I would like to do is setup a user with password for permissions to a certain directory. Here is an example situation

Username "John" is added under that same dialog box posted in the picture above. Password is set to "123" and John is given access to folder named "A" under the Projects folder. John connects via OS X using "Connect to server" and types "smb:\\servername" as the server and is asked for credentials. He types in John and 123, and is dumped to folder "Projects/A". Under Projects are other Projects, A, B, C, etc. He cannot go up a directory to this main parent, but only has access to A. Other users with same setup may be given access to B, but not A, or A & B or all files under Projects.

Is it possible to setup users like this? If not, what other options do I have?

Repped

It is possible to set permissions to include inheritable permissions from object's parent, starting from step 5 in the link below, which is what I'm guessing you mean.
http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

But doing all this through OS X isn't something I can check from my end and may require some experimentation on your part or perhaps there is a YouTube video that covers this.

 

[mcg]

Excellent resource. I will attempt some tests later today, this still leaves the question unanswered regarding creating users.

From what I am understanding you simply cannot setup a user, per the example above, as "John". I still am a little unclear on specifying who has the permissions/restrictions.

 

[chev65]

In order for the target User "John" for example, to show up on the list you need to create a Standard User account for that User on the PC or Server where the important files reside as per the link below. This will give you the option of adding only that user to the "Share With" list under the Advanced Sharing settings. You would need to do this for every User that requires special permissions.
http://www.sevenforums.com/tutorials/2974-user-accounts.html?filter

It needs to be a standard User account so they won't have full access to all the files by default, they will only have access to the files you give them access too.

This is the list I'm talking about per this link > Share Libraries or Folders Using Advanced Sharing | 7 Tutorials

You can also create a Restricted access group to prevent certain Users from accessing certain directory's or drives.
http://www.sevenforums.com/network-...rotect-directories-childrn-other-usrs-pc.html

I really can't say how all this will work with OS X as I haven't any macs laying about to experiment with but some of those tutorials on YouTube may cover it.