Setting up samba shares more complex
 

Hi Guys,

I need a little help with setting up some folders.

I have a company setup that has 7 divisions, eg, Sales, Quality Assurance, Administration, etc and for each division, there are 3 departments. Now I want the divisions to be shares, (so I dont have 21 shares), but I need specific user permissions for the department folders.

It gets complicated because certain users have access to certain departments, but not others. For example, in the Admin division there are 3 departments. The CEO (user) needs access to all 3 departments, but finance (user) is only allowed access to 2 of them BUT if the finance saves a file, the CEO must be able to read/write it.

Any suggestions?

well, dont forget that the smb users map to unix users. and the file permissions these users have still apply. so if you allow a smb user to access something their unix account doesnt have permissions for, nothing happens.


personally i would do this one of two ways

1). via unix permissions - e.g creating unix groups for each department

2). via the allowed users parameter.

I would read up on access control lists (acl). Makes it easy to allow who gets access to what and what they can do when they get there.