I have a Debian server running Samba. There are several directories that are shared between the group with some users being completely trusted, other users being partially trusted and some not trusted at all.

Group1 (trusted) needs to be able to read/write/delete anything and everything.
Group2 (partially trusted) needs to be able to read everything but only should be able to modify and delete their own files.
Group3 (not trusted) needs to be able to read but nothing else.

I'm currently using user-based file permissions to satisfy the needs of Group2 & Group3, but using this method, Group1 can't modify anyone else's files.

Did I make any sense whatsoever? Haallp!

Hello:
I've never used user-based file permissions. I've always used ADS (linux joined to Active Directory).
Suppose the problem is the same. What I do is:
- Enable acl on partition (mount it with acl option).
- Assign permissions to files/directories based on user/group acls (setfacl and getfacl commands).
- Share directories using samba and configure it to use permissions assigned to files/directories.
Time ago I put pots detailing the way to do it...

1 members found this post helpful.

Thank you for the quick reply Felipe! Unfortunately, I am having difficulty grasping how I can implement your proposed solution. The users will have thousands of files intermixed in hundreds of different shared directories (a dynamic environment where new files are constantly being created). Would your solution still apply? If so, could you explain it to me in small words (I'm not particularly bright and am new to the linux world).

Many thanks!

Please, read this posts (and the posts I've written below that) and tell me if it's what you are looking for:
- http://www.linuxquestions.org/questi...6/#post4477585

If it's what you are looking for, tell me.

Or if my previous post (in this thread) is enough but don't know how to implement it, tell me.

1 members found this post helpful.