File Sharing - inherit permissions of parent folder

First off, let me say that I'm a UNIX guy so I like the command line. The server admin tool is pretty unfamiliar territory for me..
A friend of mine runs a graphics design firm and he needed a server. I set him up with an Xserve and let me say that it is blazing fast. I am having a problem though..
There are currently two computers on the network, we'll call them users Mark and Jim. If Jim creates a file on the share, then Mark can't modify it and vise versa. This is obviously a permissions issue. Seen it a million times. Now...
the permissions that are carrying over from the workstations are rw-r--r--. I'd like everyone to be able to modify these files on the share.
The share is set up as permission 755 and if a new file/folder is created, I'd like it to pick up these permissions.
I'm confused by this AFS/ACL/ACE vs. POSIX thing. Can someone help me out here?
I had a UNIX server running NFS previously and never saw this problem.

Hi
For a good explanation and understanding of how ACLs work:
http://discussions.apple.com/thread.jspa?messageID=1535247
The above is for 10.4 Server. For 10.5 Server:
http://discussions.apple.com/thread.jspa?threadID=1234220&tstart=0
If you look here:
http://discussions.apple.com/forum.jspa?forumID=1233
You'll notice a lot of discussions regarding file sharing (the forum itself) and permissions (ACLs, POSIX) problems in particular. These current threads:
http://discussions.apple.com/thread.jspa?threadID=1251475&tstart=15
http://discussions.apple.com/thread.jspa?threadID=1428118&tstart=15
may provide more information. There is also some discussion regarding the SMB service itself. In 10.5 it appears to be not fully functioning as it should. It seems access for clients is achievable only if Guest Access is enabled which kind of defeats the whole notion of controlling access. Apple may be addressing these issues in a forthcoming update? You could perhaps research this further? There are numerous online resources available that may be useful:
http://www.apple.com/server/macosx/resources/
http://www.afp548.com/
http://bombich.com/
http://www.macosxtips.co.uk/
Hope this helps, Tony

Similar Messages

Inherit Permissions from parent

If I were to use Inherit permissions from parent instead of standard POSIX on a share, what happens
when you propergate permissions? Do permissions that you explicitly set get changed by the parent folder?
Are there any issues I should be aware of before trying Inheritted permissions?
The reason I want to change is because I have folders on my RAID that for instance hold raw un-touched images, whoever saves the files into this folder becomes the owner and everyone is read only, which is no good if someone else wants to make changes and save over the image, I have ACL set to try and overcome this, but Photoshop doesn't respect ACL and just goes by the POSIX permissions. Which means users are having to save to desktop and the drop the file in the raw image folder to replace it - which is ok but not perfect.
If I were using Inherit permissions and set the raw folder to everyone read and write, then in theory any files added into the folder would be read and write for everyone, is this correct? if so, what would happen to the permissions when a second user edits the image and re-saves it, is it still inheritting the read write permissions?
Hope this makes sense and i'm not rambling too much, but with 3Tb of files on the RAID I can't afford to experiment and screw up the permissions on the existing files else I'll be killed by 10 angry designers!

Did you ever find an answer to this? I'm having the same problem and wondering if it's simply a 10.5 server glitch. You shouldn't have to use ACL to get around it and as far as I know, if you set POSIX to inherit permissions from parents, that's exactly what should happen. But it doesn't for me either. Whoever creates a folder on our RAID becomes the new owner and staff is read-only.

I have been trying to download photos. It keeps saying can't create file, please check permissions on destination folder. Ihave made sure I have set the permissions on read and write. What am I doing wrong?

I have been trying to download photos too my MAC. It keeps saying can't create file, please check permissions on destination folder. Ihave made sure I have set the permissions on read and write. What am I doing wrong?

Lanakivee
Try this it worked for me Pat Willener gave it to me off the site :
I have not read all you wrote, so I may have missed some points. As I understand it, you installed FP 10 on IE7, but it won't play any Flash content?
Try this
download the FP uninstaller from http://www.adobe.com/go/tn_14157
close all browser windows, then run the uninstaller
download the offline ActivX installer for Internet Explorer from http://fpdownload.macromedia.com/get/flashplayer/current/install_flash_player_ax.exe
close all browser windows, then run the installer

"Inherit Permissions From Parent" doesn't work

In OS X 10.5 server, selecting the option for an AFP share to inherit permissions from its parent does not work for users on OS X 10.3. All files created by users running 10.3 have 755 permissions, regardless of the parent folders permissions.
Clearly, this rather dramatically reduces the utility of AFP in 10.5 Server for anyone with users running OS X 10.3.
OS X 10.3 server did not have this problem.
Manually propagating permissions is futile for two reasons. First, the needed set of nested permissions is complex enough that propagating them manually would take hours, and secondly there would be intervals between the propagations when documents would not be accessible to the right people.
Consider a drastically simplified example:
Imagine a share named "Share" with a folders inside it named Admin. Inside the Admin folder might be two additional folders named Accounting and Personnel. Inside Personnel there are folders named Performance Review and Forms. It would look like this:
Share
-- Admin
----- Accounting
----- Personnel
-------- Performance Review
-------- Forms
Now consider several groups: Employees, Accounting, HumanResources
Employees should have read write access to Share, and everything under it unless more restrictive permissions are explicitly created. Only the Accounting group has access to Accounting, and everything in Accounting should only be accessible to Accounting. Performance Reviews should only be accessible to the HumanResources group, but Forms should be accessible to all Employees.
Now a member of the employees group saves a new file in the Forms folder, but the group doesn't have, and needs, read/write privileges. To fix this the permissions from Share can't be propagated to all the files and folders inside it because that would nuke the special privileges for Performance Reviews and Accounting.
It might be conceivable that every n minutes a script could run that would recurse, depth first postorder, through the hierarchy assigning all files in each folder the permissions of the enclosing folder, but there are at least two problems with that. First, it would be slow and between runs the files wouldn't have the right permissions. Second, sometimes we might want a file to have special explicitly specified permissions that differ from the parent, but it would be terribly cumbersome to specify the exceptions for this sort of script.
POSIX behavior also doesn't solve the problem because it will set the same permissions as we're seeing already, there's no obvious way to change the default permissions, and doing so would have security implications elsewhere on the server if that "umask"ish setting couldn't be specified exclusively for the share.
Inherited permissions would solve the problem, and have solved the problem under past versions of OS X server, but they don't work on 10.5 with 10.3 clients.
Does anyone know of a workaround or have any additional details?

glad someone else is experiencing this, I'm having the same problem with inherit from parent.
I was going to start using inherit because Leopard has ruined ACL's, Leopard clients don't honour the deny delete subfolders and files ACE, basically the leopard permissions systems seem to be flawed

File sharing - unable to copy photo folder

Hi!
I'm using File Sharing to connect my iMac to my mother's iMac.
I'm trying to copy a folder called "Mom Photos" (sub-folder of the main Pictures folder) to my computer. I created a user name and password on her iMac that I use to login from my iMac. Once logged in, when I click on the "Mom Photos" folder and try to copy and paste it on my computer, I see the following error message: "The items on the Clipboard can't be pasted to this location. One or more of the items may have been deleted or are no longer available."
When I created my user name on her iMac, I set the privileges to "Read and Write."
If I open the "Mom Photos" folder and select all the individual sub-folders within, copy and paste them to a folder on my iMac, I see the following message: "One or more items can't be copied to "Pictures" because you don't have permission to read them, Do you want to copy the items you are allowed to read?"
Thank you for any help!

Not being able to copy the folder itself would suggest that it has some other file, probably hidden, that is stopping the procedure. You could go up one level and perform the same action, but if this next level up is the Pictures folder then it might be best not to do this as the iPhoto library is also included within the Pictures folder.
One possible workaround would be to create yet another folder within the Pictures folder and then copy the "Mom Photos" folder inside this. Then when you do the Apply to Enclosed Items for this new folder, the "Mom's Photos" folder should now be available to copy.
If this still doesn't help then there is a Terminal command called change mode (chmod) that can be used to change the permissions on this folder. This would require to be on your mums iMac and to use her account, as you will need to authenticate to complete the task. It would be best if you can complete the operation without using Terminal but if using the GUI doesn't succeed then Terminal may be your next best option.

Groups missing inherited permissions from parent folder on SMB share on save

If i save a file on a lion share where i have access RW over group permissions, the groups missing inherited permissions on SMB share on save.
File permissions before save:
user: read/write
group: read/write
other: no access
File permissions after save:
user2: read/write (it changed to the actual users who has permission on the Group)
group: no access !!! Why??
other: no access
On Mac OS X 10.6 i was able to force the group permission, from the parent folder.
Everytime i must manualy propagate from the parent folder to fix this !
Any ideas?

I have the same problem. What exactly do you mean by add ACL. I have tried to change the permissions to add the inheritance via ACL, with no joy - so any help you can give would be appreciated. Thank you.

Concern with "File Sharing: On" -- my root user folder (and subfolders) and Macintosh HD is visible

Hi all,
When I set up a File Sharing folder in OSX called "Share", I connected from my PC to my Macbook Pro and not only did I see the "Share" folder but I also could see and have total access to my root user folder (all its subfolders too) and my Macintosh HD (hard disk). Did I miss something? All I did was check mark "File Sharing" in the Sharing option of System Preferences. Then I specifically shared only the "Share" folder that I created on the OSX desktop.
How do I turn of sharing for the root user folder and my Macintosh HD folder?
Many thanks in advance!

Yes, I was logging in from my PC laptop to Mac as the Admin. However, since there is a User called "Everyone" and I, for testing purposes only, turned Read/Write on for "Everyone", I figured I did not have to set up another user (such as "Guest"). I was wrong. Once I created a new user called "Guest" and specifically checked the Guest account in the SMB option, it worked in the restricted mode I was hoping for. Thanks!

Document library not automatically inherit permissions from parent

Hi all,
Whenever I create a new document library the inherit permissions not automatically set for this library, So I have to click Inherit permissions for each time i create a new document library. please
help to apply inherit permissions automatically whenever new library create.
Manikandan

Hi Alex,
when you create a library and then go to the permissions settings for it it's set to not inherit permissions?
Ans : It Does not have any inherited permissions from the parent site.
Does it have a copy of the standard permissions set? If not what does it have and what is it missing from the site default?
Ans : No. Empty permissions.
But whenever i stop and start apply inherited permissions on the parent site works fine (I mean apply to all document library). but i could not do it all time whenever the new library create. I hope whenever the permissions changes on the parent site may
affect the document lib permissions. pls help how to proceed ?
Manikandan

HT4538 10.6.8 does not mount afp file share, only mounts to parent folder

This article http://support.apple.com/kb/HT4538 states that 10.6.7 and later can mount files from a url such as afp://myserver.mydomain.com/Sharepoint/Folder/File.txt
However in 10.6.8 instead of opening the file, only the parent folder is mounted.
Was this issue not truely solved or are there some files that might need to be purged ?

Maybe I don't understand how you are producing this behavior, but I can't reproduce it.
I have mounted an AFP volume. I have gone a few folders deep and created a folder X in some directory Y. I move folder X to the trash. I get the warning that it will be deleted immediately. I approve. Folder X disappears and I am still looking in folder Y (with X gone, now, of course).
I checked this in each of list view, icon view and column view, with the same result each time.
Am I not doing what you are doing?
If I am doing what you are doing, there is something peculiar about your server, I guess.
charlie

File Sharing/Applying Permissions/Both Macs CRASHED!!!

Someone Please Help!!!
I'm a 14+ year Microsoft IT Professional. 6 months ago I traded my HP Notebook for a brand new MacBook (White) and for Christmas, traded my HP Entertainment notebook and accessories towards the purchase of a brand new 21.5" iMac! Very happy with decision until about an hour ago.
Today, I purchased a USB 1TB external drive. It's connected to the iMac and was attempting to setup sharing for it. This was so I could finally setup Time Machine and create a backup of my MacBook which included my entire iTunes and iPhoto Library as well as my family website (not yet published).
I had both machines connected to my wireless network and they were talking to each other fine. I was logged on to my wife's account on the iMac (setup as an administrator) and setting up sharing from there. My MacBook was not able to see the External Drive for some reason...which I saw did not have the user permissions setup properly. I added myself to the list, changed the permissions to read/write, then right-clicked to accept permissions. It ran for about 15 seconds then was done.
On the MacBook, I did the same as my wifes account was not set to see the shared resources on the MacBook. However, when I right-clicked to apply permissions, I began to get errors writing the permissions. Was advised of the errors and only able to click OK. I did this for about 25 permissions...then the machine froze. I did a hard reboot and now my MacBook sits at the grey apple startup screen with the gear turning and won't startup. I attempted to log into SafeMode by holding shift until I saw the progress bar under the gear at startup...but after about halfway through, the progress bar disappeared and left with only the apple and gear turning.
On the iMac, my wife's account would not allow me to open Safari or any other programs (the dock icons just bounced and bounced...no options to force quit). I was able to click the Apple logo and restart. Upon restart, I logged back into Wife's account and her desktop was back to default, the external drive did not show as connected on the desktop (but was available in the finder) and her documents and downloads folder icons in the Dock had grey question marks and were not accessible. Nor can I access them in finder. She had just finished updating her iCal earlier today and when we tried to access iCal, it could not find the file for her calendars.
The only positive at this point is that my account is fine. I didnt do anything while on my account and it appears to be working fine.
Being a new Mac user, I have been following the online tutorials and support discussions for anything I havent done before. However, now I have a dead MacBook (with all of my families photos and iTunes music unaccessible) and my wife's documents and information is unaccessible.
Please someone help me to get things back to normal!! All I wanted to do was to backup both machines now that I had the means to and setting that up caused what appears to be an epic crash:(

bstossel wrote:
Someone Please Help!!!
I'm a 14+ year Microsoft IT Professional. 6 months ago I traded my HP Notebook for a brand new MacBook (White) and for Christmas, traded my HP Entertainment notebook and accessories towards the purchase of a brand new 21.5" iMac! Very happy with decision until about an hour ago.
Today, I purchased a USB 1TB external drive. It's connected to the iMac and was attempting to setup sharing for it. This was so I could finally setup Time Machine and create a backup of my MacBook which included my entire iTunes and iPhoto Library as well as my family website (not yet published).
I had both machines connected to my wireless network and they were talking to each other fine. I was logged on to my wife's account on the iMac (setup as an administrator) and setting up sharing from there. My MacBook was not able to see the External Drive for some reason...which I saw did not have the user permissions setup properly. I added myself to the list, changed the permissions to read/write, then right-clicked to accept permissions.
right-clicked to accept permissions? what do you mean by that? you don't have to right-click on anything when you are changing permissions on something. did you perhaps use "apply to enclosed items" to propagate permissions to everything inside? please clarify.
It ran for about 15 seconds then was done.
same question. changing permissions is instantaneous unless you use "apply to enclosed items".
On the MacBook, I did the same as my wifes account was not set to see the shared resources on the MacBook. However, when I right-clicked to apply permissions,
same question as before. what did you right-clicked on and what did you apply permissions to?
I began to get errors writing the permissions.
I'm quite lost at this point. please explain what's going on. I'm not reading the rest of it....
Was advised of the errors and only able to click OK. I did this for about 25 permissions...then the machine froze. I did a hard reboot and now my MacBook sits at the grey apple startup screen with the gear turning and won't startup. I attempted to log into SafeMode by holding shift until I saw the progress bar under the gear at startup...but after about halfway through, the progress bar disappeared and left with only the apple and gear turning.
On the iMac, my wife's account would not allow me to open Safari or any other programs (the dock icons just bounced and bounced...no options to force quit). I was able to click the Apple logo and restart. Upon restart, I logged back into Wife's account and her desktop was back to default, the external drive did not show as connected on the desktop (but was available in the finder) and her documents and downloads folder icons in the Dock had grey question marks and were not accessible. Nor can I access them in finder. She had just finished updating her iCal earlier today and when we tried to access iCal, it could not find the file for her calendars.
The only positive at this point is that my account is fine. I didnt do anything while on my account and it appears to be working fine.
Being a new Mac user, I have been following the online tutorials and support discussions for anything I havent done before. However, now I have a dead MacBook (with all of my families photos and iTunes music unaccessible) and my wife's documents and information is unaccessible.
Please someone help me to get things back to normal!! All I wanted to do was to backup both machines now that I had the means to and setting that up caused what appears to be an epic crash:(
Message was edited by: V.K.

File Sharing and Permissions ANNOYING!!!

I'm trying to share files between my macpro and macbook pro, both running 10.5.2. The files appear to share fine between the 2. I throw a file into the public folder and it pops up on my other mac, even opens fine. But when I go to save it, it says I don't have sufficient privilages. It seems that by default any file that is shared is the property of the sending mac and automatically denies me write privilages on any files I send between my macs. The only way to fix this is copy the files once they reach their destination mac, which is annoying when you're dealing with large files and whole directories full of large files.
What I want to be able to do is copy a file or folder from, lets say, my macbook pro to my macpro and automatically have full privilages on it, without the need to re-copy it. I even set up a folder outside of the public folder and set that up as a shared folder. That didn't work. When I connect between my macs I do it via direct ethernet and I don't use the guest account.
I'm a digital graphics artist, so this is **** trying to keep my assets available and up to date on both my machines.
Oh, and I can't use target disk mode unfortunately (has to do with license servers, floating licenses and lengthy 3d renders).
thanks for any help on this,
kvb

The easiest way is to authenticate as a valid user on each box.
For your MacBook Pro
Click on "Connect as..." on the MacPro icon and enter the username and Password of a valid user on the MacPro.
For your MacPro
Click on "Connect as..." on the MacBookPro icon and enter the username and Password of a valid user on the MacBookPro.
That should work, with full access.

AD Credentials, File Sharing and Permissions

I've created a sharepoint on an Xserve G5 running Mac OS X Server 10.4.5. This sharepoint is to be shared to both Mac and Windows clients using Samba. A local group was created that is comprised mostly of Active Directory users. This local group was given Read&Write access for the share. The users in this group can all mount the share. However, whenever the group users try to delete existing files, or add files to the share they receive an error stating:
"The operation cannot be completed becaue you do not have sufficient priveleges for some of the items."
I've verified that the correct users are in the group, that the group has Read&Write access, and that the users can mount the share. I just can't figure out where the permissions would be wrong to give that error. Everything looks right, to me.
Help?

I've seen this error message before; these links may be of interest, even though they don't solve your problem:
A similar posting to which I've replied: http://discussions.apple.com/thread.jspa?threadID=409444&tstart=0
My original observation of this problem in Mac OS X 10.4.2: http://discussions.apple.com/thread.jspa?messageID=647624
Your situation may be similar; however, I would also check to be sure that the "ignore permissions/ignore ownership" box is un-checked in the Info window of the volume that houses the share point. Occasionally, I've seen situations in which that has caused the failed copy error.
--Gerrit

Automator and applescript to copy new files in a folder with same name as parent folder

I have an iMac with a pictures folder (Finder folder) containing several subfolders with pictures. As per now, all these subfolders are imported into an iPhoto library (and the structure of the Finder pictures folder is thus maintained: The iPhoto events are named the same as the Finder subfolder). I.e. I have not created any albums in iPhoto.
I have also set up a workflow, where new iPhone photos are automatically being synced to specified Finder folders within the iMac pictures folder. So what I want to do is to make a workflow to import potential new photos from week to week into the existing iPhoto structure. I know iPhoto has this Autoimport folder, so this one is unpacked and "mapped". So, this is what I´m hoping to do:
Automator (iCal - want to do this on a weekly basis):
- Get specified Finder items -- set to target folder = iMac pictures folder
- Get folder content (with subfolders)
- Filter Finder items
     - Items from the last 7 days (which then would be any new files created last week)
- Applescript/shell script loop(?)
     - Get folder name for each file´s (from previous step) parent folder
     - Create new folder with same name as the file´s parent folder (if not already existing) under the iPhoto Autoimport folder
     - Copy the given file into the folder from above
- Run iPhoto application (Automator task), which then should just auto import the new photos according to the Finder folder structure
Whith the workflow above, I aim to maintain the existing iPhoto structure, and just import new photos into the existing structure. Creating folder names under the Autoimport, similar as the existing Finder folder names / iPhoto events should make it possible to have the new files imported under the existing event, right?

Anyone?
I have now switched to Aperture (from iPhoto) due to Aperture´s capability to handle Finder folder structure, and due to the possibility of having the pictures within Aperture as referenced files to the pictures within the Finder folders (i.e. possibility to delete pictures from both library and Finder folder at the same time).
So I have a superior Finder folder called "Album". Within "Album" I have several subfolders (sub albums) containing pictures. The "Album" folder with subfolders are imported into Aperture as "Projects and albums", and the pictures are uploaded within the Aperture structure as referenced files. So for now the Aperture structure is more or less a direct mirror of the Finder folder structure, whereas "Album" is the project.
And this is my current workflow in Automator, but I´m searching help with my Applescript:
- Get specified Finder items (target folder = the superior Finder folder "Album")
- Get Folder content
- Filter Finder items (to look for potential new files to import into Aperture)
     - Kind is not folder
     - Date created last X days
The output files from this task enters an Applescript
on run {input, parameters}
       repeat with f in input (**Loop**)
               tell application "Finder"
                      set fileName to name of (f)
                      set parentFolder to name of container of (f)
                      tell application "Aperture"
                             tell library 1
                                    tell project "Album"
                                           if (exists album parentFolder) then
                                             ** I then would like to check if fileName already exist within the existing album**
                                             ** If not existing, I would like to import file f into the existing album as a referenced file**
                                           else if not (exists album parentFolder) then
                                                   make new album with properties {name:parentFolder}
                                            ** I then would like to import file f into the new album as a referenced file**
                                           end if
                                    end tell
                             end tell
                      end tell
               end tell
       end repeat
end run

File sharing in 5-Mac environment, X-Server 10.3

I have five Macs, G4's and G5's. Five graphic designers, who back up their work on a Mac XServer 10.3
Permissions on designers are set to read/write for everyone.
Designer A backs up his job to the XServer, then Designer B needs to edit it, so she attempts to transfer it from the XServer.
Permission denied for only some of the files, not all.
I guess I need some guidance on the proper way to network these Macs. Do I create a group? So far, they have to log on to each other as "Guests" and can utilize the Public>Drop Box directory.
Thank you for any insights...

Server 10.4 (Tiger) introduced ACLs into the mix (Access Control Lists). If your volume has ACLs enabled, then you will forced to use ACLs to set permissions. This is not necessarily a bad thing, but if done improperly you can have a lot of confusion.
To begin, determine if your volume has ACL support enabled. This can be done one of two ways:
1: Open Workgroup Manager and press the Sharing tab in the top navigation bar. Select one of your Shares Points and review the settings on the General tab. Is the box "Enable Access Control Lists on this volume" selected?
2: You can also use the fsaclctl command. Basically use fsaclctl -p /path/to/volume. You can also use fsaclctl to enable and disable ACL support. A reboot of the server or a volume unmount/mount is required each time you toggle the function on/off.
There are two ways to look at this. First, do all your client applications support ACLs if users work directly from the server. I know, I know. Don't work from the server. Try and tell that to designers who have been doing it since '84. Many versions of Photoshop will fail if ACLs are used and the group POSIX rw is not set.
If all of your apps work, ACLs are pretty good under 10.4. Just don't use the Deny rule unless you absolutely need to. Keep the ACL simple. And understand the evaluation order.
Now if ACLs are not required, you can disable ACL support on the volume and go back to POSIX inheritance. Once again, in Workgroup Manager, select your share point, press the Protocols tab and review the settings at the bottom. Note the Inherit permissions from parent option is available if ACLs are disabled. Make sure you have the correct POSIX permissions on the parent folder, server admin owner, group of users set as group, with read/write on both. The other can be left none or read only. None can cause some confusion so keep that in mind.
Then propagate permissions using the Access tab. Click the little gear and choose Propagate Permissions. You will also find the effective permissions inspector in there. Very useful for understanding ACL complexities.
Hope this helps

Personal File Sharing -- How secure it is?

Hi,
I have a hopefully easy question for you network expert:
1) I turned on Personal File sharing.
2) In one folder, I changed ownership & Permissions in "Others" to "Read & Write"
3) My network is wireless with encrption turned on.
I have done some testing but since I don't have a Windoze machine to test, I am wondering: Can someone OUTSIDE my wireless network gain access into my shared folders? Is this possible?
Thanks for any advice.

Only if you open up port 548 on your wireless router
and use NAT to direct that traffic to port 548 on
your machine. The same will be true of Windows
sharing, just with different ports.
The moral of the story is that a hardware router will
go a long way to keeping viruses and hackers out of
any network.
Thanks.

File Sharing - inherit permissions of parent folder

Similar Messages

Maybe you are looking for