Groups missing inherited permissions from parent folder on SMB share on save

If i save a file on a lion share where i have access RW over group permissions, the groups missing inherited permissions on SMB share on save.
File permissions before save:
user: read/write
group: read/write
other: no access
File permissions after save:
user2: read/write (it changed to the actual users who has permission on the Group)
group: no access !!! Why??
other: no access
On Mac OS X 10.6 i was able to force the group permission, from the parent folder.
Everytime i must manualy propagate from the parent folder to fix this !
Any ideas?

I have the same problem. What exactly do you mean by add ACL. I have tried to change the permissions to add the inheritance via ACL, with no joy - so any help you can give would be appreciated. Thank you.

Similar Messages

Newly scanned documents not inheriting permissions from containing folder

I have four Pcs that all see each other on a local network. I just bought a new Xerox scanner and my goal is to scan
documents from it into one of the PCs into a shared directory so that all 4 PCs will then have access to these scanned
documents. The host PC is running Vista. The problem I'm having is that the newly scanned documents are not visible or
accessible to the other three PCs. The shared directory and any existing files in the directory are accessible. I have
included Everyone with Full Control in the permissions for the folder, and set it to give these permissions to all files
and subfolders. However, when a new files is scanned in and created, I see that Everyone is not listed there in the
permissions of the file. I can unshare and reshare the containing folder and then Everyone does appear in the permissions
list, but that really is inconvenient to have to do that every time I scan a new file in. I also can copy the new file to
another folder and then back into the shared folder and the Everyone user will be in the permissions list.
But can someone please tell me why the newly scanned document just doesn't inherit the exact permissions of the containing
folder in the first place??? And yes I have tried everyone option there is under the sharing and Security tabs and their
advanced and customized options for the containing folder and nothing seems to work.

I have had the same problem on an office network. I host the shared directory from my machine and provide user accounts on my machine that employees use to login to the shared folder and grab newly scanned documents. Each of their accounts are set as administrator to give max permissions to the files. My problem was that the new scanned files (PDF) were not inherenting the permissions of the parent directory. I tried everything I could to resolve the issue and then found this thread. Here's how I'm currently handling this problem:
I created a batch file like this:
:TOP
@echo off
icacls c:\tempworks /inheritance:e
PING 1.1.1.1 -n 1 -w 60000 >NUL
GOTO TOP
The ping command forces a 60sec pause in the script.
The directory you are having problems with needs to be the directory on line 3...
Throw that batch file on the desktop and let it run. It requires virtually no system resources to operate and sends a forced inheritance command to the directory every minute to tell it to make any new files visable in the directory to all users.
I know it's a Jimmy Rig solution, but it works flawlessly and any more time spent on this issue probably would have made me go insane.

Windows server 2008 R2 File& Folder Permissions; Ghost Permissions From "Parent Object" Assigned to Folder Owner

Windows 2008 R2 file server: Subfolders of a particular folder have an account that has Full Control permission that are listed as inherited. That account has no permissions in the parent folder. It was, however the account that was used to copy the folders
and their contents in there from another source and was the owner of the folder.
In Advanced Permissions, it shows them as inherited from "Parent Object" as opposed to the folder name of the parent folder (there are some of these.) (The parent folder of the place where the problem occurs does not inherit from _its_ parent)
I removed it as owner and yet the permissions remained. (as displayed either through the GUI or with ICACLS.)
If I make _any_ edit in Advanced Permissions, the 'ghost' permissions then go away (e.g. add my account with full control - I'm domain admin, so have that anyway) This step seems like it should be unnecessary, but it is required in this situation.
I've done this to 5 of about 20 subfolders and it is consistent. Folders which did not have the 'problem account' as their owner did not exhibit this characteristic.
This affects the files within the subfolders as well.
Oddly, adding an owner to a folder has the same effect and required the same edit before the permissions are seen. This was tested on a different drive on the same server.
Is this an anomaly, a bug, or expected performance?

Hi,
Do you mean that there is an account that has Full Control permission that are listed as inherited but it doesn’t appear in the parent NFS permissions? If so, please try to uncheck the "Include inheritable permissions from this object's parent" checkbox,
clicking Apply.
There is a similar thread, please go through it to help troubleshoot this issue:
NTFS: I have a user’s that's inherited from parent folder but it doesn’t appear in the Parent ACL
http://social.technet.microsoft.com/Forums/windowsserver/en-US/6061af36-4d44-4de8-8139-d71f06d59a2c/ntfs-i-have-a-users-thats-inherited-from-parent-folder-but-it-doesnt-appear-in-the-parent-acl?forum=winserversecurity
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Inherit Permissions from parent

If I were to use Inherit permissions from parent instead of standard POSIX on a share, what happens
when you propergate permissions? Do permissions that you explicitly set get changed by the parent folder?
Are there any issues I should be aware of before trying Inheritted permissions?
The reason I want to change is because I have folders on my RAID that for instance hold raw un-touched images, whoever saves the files into this folder becomes the owner and everyone is read only, which is no good if someone else wants to make changes and save over the image, I have ACL set to try and overcome this, but Photoshop doesn't respect ACL and just goes by the POSIX permissions. Which means users are having to save to desktop and the drop the file in the raw image folder to replace it - which is ok but not perfect.
If I were using Inherit permissions and set the raw folder to everyone read and write, then in theory any files added into the folder would be read and write for everyone, is this correct? if so, what would happen to the permissions when a second user edits the image and re-saves it, is it still inheritting the read write permissions?
Hope this makes sense and i'm not rambling too much, but with 3Tb of files on the RAID I can't afford to experiment and screw up the permissions on the existing files else I'll be killed by 10 angry designers!

Did you ever find an answer to this? I'm having the same problem and wondering if it's simply a 10.5 server glitch. You shouldn't have to use ACL to get around it and as far as I know, if you set POSIX to inherit permissions from parents, that's exactly what should happen. But it doesn't for me either. Whoever creates a folder on our RAID becomes the new owner and staff is read-only.

Document library not automatically inherit permissions from parent

Hi all,
Whenever I create a new document library the inherit permissions not automatically set for this library, So I have to click Inherit permissions for each time i create a new document library. please
help to apply inherit permissions automatically whenever new library create.
Manikandan

Hi Alex,
when you create a library and then go to the permissions settings for it it's set to not inherit permissions?
Ans : It Does not have any inherited permissions from the parent site.
Does it have a copy of the standard permissions set? If not what does it have and what is it missing from the site default?
Ans : No. Empty permissions.
But whenever i stop and start apply inherited permissions on the parent site works fine (I mean apply to all document library). but i could not do it all time whenever the new library create. I hope whenever the permissions changes on the parent site may
affect the document lib permissions. pls help how to proceed ?
Manikandan

"Inherit Permissions From Parent" doesn't work

In OS X 10.5 server, selecting the option for an AFP share to inherit permissions from its parent does not work for users on OS X 10.3. All files created by users running 10.3 have 755 permissions, regardless of the parent folders permissions.
Clearly, this rather dramatically reduces the utility of AFP in 10.5 Server for anyone with users running OS X 10.3.
OS X 10.3 server did not have this problem.
Manually propagating permissions is futile for two reasons. First, the needed set of nested permissions is complex enough that propagating them manually would take hours, and secondly there would be intervals between the propagations when documents would not be accessible to the right people.
Consider a drastically simplified example:
Imagine a share named "Share" with a folders inside it named Admin. Inside the Admin folder might be two additional folders named Accounting and Personnel. Inside Personnel there are folders named Performance Review and Forms. It would look like this:
Share
-- Admin
----- Accounting
----- Personnel
-------- Performance Review
-------- Forms
Now consider several groups: Employees, Accounting, HumanResources
Employees should have read write access to Share, and everything under it unless more restrictive permissions are explicitly created. Only the Accounting group has access to Accounting, and everything in Accounting should only be accessible to Accounting. Performance Reviews should only be accessible to the HumanResources group, but Forms should be accessible to all Employees.
Now a member of the employees group saves a new file in the Forms folder, but the group doesn't have, and needs, read/write privileges. To fix this the permissions from Share can't be propagated to all the files and folders inside it because that would nuke the special privileges for Performance Reviews and Accounting.
It might be conceivable that every n minutes a script could run that would recurse, depth first postorder, through the hierarchy assigning all files in each folder the permissions of the enclosing folder, but there are at least two problems with that. First, it would be slow and between runs the files wouldn't have the right permissions. Second, sometimes we might want a file to have special explicitly specified permissions that differ from the parent, but it would be terribly cumbersome to specify the exceptions for this sort of script.
POSIX behavior also doesn't solve the problem because it will set the same permissions as we're seeing already, there's no obvious way to change the default permissions, and doing so would have security implications elsewhere on the server if that "umask"ish setting couldn't be specified exclusively for the share.
Inherited permissions would solve the problem, and have solved the problem under past versions of OS X server, but they don't work on 10.5 with 10.3 clients.
Does anyone know of a workaround or have any additional details?

glad someone else is experiencing this, I'm having the same problem with inherit from parent.
I was going to start using inherit because Leopard has ruined ACL's, Leopard clients don't honour the deny delete subfolders and files ACE, basically the leopard permissions systems seem to be flawed

Contribute + Inheritance permission from parent site permission conflict

Hi All,
In one of my site collection, i have many sub folder which is placed to inherit permission from parent site. I have group who have contribute access to the parent site. But they getting access denied when they try to access the folder.
As a workaroud, when i change the full toolbar to No toolbar.. this is working fine as expected. But when i revert back .. it is throwing access denied error on accessing the site

Are these folders placed in any library ? or any web part ? If they are inside library, is there any inheritance break on library level ? What is the result of check permission if you check it for the group on library and folder level ? Is it giving you
Limited access, none or contribute?
Let us know your results, thanks
Regards,
Pratik Vyas | SharePoint Consultant |
http://sharepointpratik.blogspot.com
Posting is provided AS IS with no warranties, and confers no rights
Please remember to click Mark As Answer if a post solves your problem or
Vote As Helpful if it was useful.

WDS server configuration: remote installation folder on SMB share possbile?

Hello,
is there a way to use an SMB share for the remote installation folder whichI have to specify during the WDS configuration wizard? If I enter my SMB share I get the following error: 'The filename, directory name, or volume label syntax is incorrect.'
Can the remote installation folder only exist on local storage?
Thanks.

Is there really no way to put the remote installation folder for WDS on a network share?

FCP 6.0.2 Projects don't inherit ACL or owner group from parent folder

I am having difficulty sharing Final Cut projects between edit stations since upgrading to FCP 6.0.2 and Xsan 1.4.2.
I have 5 Final Cut editors (PowerMac G5s) that store project files in a folder called "Projects" on an Xsan volume. The editors are all logged in to Open Directory accounts on an Xserve G5 running 10.4.11, which also has the Xsan volume mounted.
I want all files created in the Projects folder by the editors to be writable by all other editors, I don't really care if I use POSIX permissions of ACLs to get the job done.
All editors are members of the OD group "staff" which has full control (via an ACL) of the Projects folder and is the owner group of the Projects folder.
From any of the computers, logged in in as one of the editors, I can create a text file in the projects file (echo "test" >> test.txt), and ls -le shows that "staff" is the owner-group of test.txt, and the staff/full control ACL is attached to the file.
If I save a Final Cut project in the Projects folder, there is no ACL attached to the file, and the owner-group is "wheel."
This worked as expected under FCP 6.0.1, Xsan 1.4.1, and OX X 10.4.11. Any ideas or help would be greatly appreciated.
-Chris

I'm not sure if this is applicable on Xsan, but about a year or so ago I was having a similar problem on a server share. Turns out the problem was that I had R/W permission for the 'editing' group on the folder, as well as an ACL giving 'editing' Full Control access to the same folder. Did some research and found out there was a bug that if the same group is in the POSIX permissions as well as the ACL it caused problems much like what you are having. I would assume/hope that this has since been fixed in past OS X Server updates, but I don't know for sure. Give that a shot and see if the problem goes away. Just thought I'd throw out my two cents...

Missing Scroll Bar from Applications Folder in Dock

When I click the Applications Folder from the Dock in the Grid format, the scrollbar is missing. The only way to "scroll down," to other apps is by pressing the up/down arrow keys, in which the vertical bar briefly pops up but then disappears (no arrows pop up). I can view the Applications Folder as normal in Finder, but I prefer to just be able to click and scroll from the Dock.
I've tried switching from Fan to List to Grid to Automatic, etc. Whenever I return to Grid, there's still no scrollbar.
No scroll bar visible...
Vertical scroll bar shows up when I use the Up/Down arrows on keyboard, but then disappears again; no arrows visible.

From your system preferences under general, you can select if you want scrollbar to only show when actively scrolling, always, or based on mouse or trackpad.

File Sharing - inherit permissions of parent folder

First off, let me say that I'm a UNIX guy so I like the command line. The server admin tool is pretty unfamiliar territory for me..
A friend of mine runs a graphics design firm and he needed a server. I set him up with an Xserve and let me say that it is blazing fast. I am having a problem though..
There are currently two computers on the network, we'll call them users Mark and Jim. If Jim creates a file on the share, then Mark can't modify it and vise versa. This is obviously a permissions issue. Seen it a million times. Now...
the permissions that are carrying over from the workstations are rw-r--r--. I'd like everyone to be able to modify these files on the share.
The share is set up as permission 755 and if a new file/folder is created, I'd like it to pick up these permissions.
I'm confused by this AFS/ACL/ACE vs. POSIX thing. Can someone help me out here?
I had a UNIX server running NFS previously and never saw this problem.

Hi
For a good explanation and understanding of how ACLs work:
http://discussions.apple.com/thread.jspa?messageID=1535247
The above is for 10.4 Server. For 10.5 Server:
http://discussions.apple.com/thread.jspa?threadID=1234220&tstart=0
If you look here:
http://discussions.apple.com/forum.jspa?forumID=1233
You'll notice a lot of discussions regarding file sharing (the forum itself) and permissions (ACLs, POSIX) problems in particular. These current threads:
http://discussions.apple.com/thread.jspa?threadID=1251475&tstart=15
http://discussions.apple.com/thread.jspa?threadID=1428118&tstart=15
may provide more information. There is also some discussion regarding the SMB service itself. In 10.5 it appears to be not fully functioning as it should. It seems access for clients is achievable only if Guest Access is enabled which kind of defeats the whole notion of controlling access. Apple may be addressing these issues in a forthcoming update? You could perhaps research this further? There are numerous online resources available that may be useful:
http://www.apple.com/server/macosx/resources/
http://www.afp548.com/
http://bombich.com/
http://www.macosxtips.co.uk/
Hope this helps, Tony

Export Release Locked To Execute From Parent Folder

Adobe Flash Builder 4.5, Windows XP, Actionscript Project for the Web (not AIR). Worked fine, export it, used it in html, hurray!
Got a new laptop, Windows 7, re-installed Flash Builder 4.5, import project, press play, works fine! Export release build, works fine! Try to copy/paste release build .swf to other directory to put it online, it shows up blank! From various debugging, found that most all projects I imported have this same problem: they work in the parent directory of the workspace, but once I either rename that folder in Windows or copy/paste the necessary .swf and assets outside of that folder, nothing shows up anymore (in one instance, a blue background showed up and a little bit of text, but the text had no formatting and the rest of the display was not present).
Tried looking into linked resources, extracting src data and building a new project with a different name from scratch, made sure everything wasn't read-only or some other permission issue, tried most everything I could think of.
Ideas?

Hi Martin,
   Below are the steps to do an export release build and deploy the same on to any required target server (in your case MAMP)
Export release build of the project with the existing server settings:
1. Do export release build of the project.
2. zip the bin-release folder contents into say <xyz>.zip
3. upload xyz.zip to the target server and unzip its contents to /wwwroot/<xyz>/
Additional configurations and installations:
1. Zend installation: Your current local webroot would have a folder called ZendFramework, zip it and upload it to your server.
   Unzip the framework in your web root. If Zend Framework is installed in a location other than webroot, then you would have to update the amf_config.ini file. The amf-config.ini file will be found in the <xyz> folder
-    Uncomment and modify zend_path variable to the absolute path of the Zend framework directory.
-    Set amf.production to true.
-    Update webroot with the absolute path to the web root on the server
2. Ensure that any of the php services used by the application is already deployed on the server.
     Ensure that the same directory structure is maintained for the services deployed.
Hope it helps.
Regards,
   Latha

Samba 4: users unable to move files from compressed folder to Samba share

I have recently upgraded Samba 3.6.x from Centos 6.6 to Samba 4.1.12 on Centos 7.The shares were migrated in place. I reset permissions and Windows ACLs according to the Samba 4 Wiki.
When a user opens a compressed folder (a.k.a. Zip file) on Windows 7, then tries to copy the files into a shared folder on the Samba 4 server using drag & drop, only one to four files is actually copied, and the copy process silently fails. If the user waits about 2 minutes, then they can move all of the files without issues. Also, if the user is able to copy all files, when they try to delete the newly created folder they get an error: Thumbs.db cannot be deleted because it is open in Windows Explorer.
So, the root of the cause seems to be Windows Explorer locking files for too long. But I don't understand this enough to fix it.
No errors appear in the...
This topic first appeared in the Spiceworks Community

"admiz" should be the account name anyway.
When you do a Get Info on that in the Finder... what is locked, & Rights say?

No connection from XI3.0 to smb share after lost of connection

Hi Forum,
we got issues with XI 3.0 after disconnection of
a smb share.
The smb share is located on a UNIX machine with the opensource fileserver SAMBA 3.x running on it. After a disconnect of the WAN link to the UNIX maschine XI has to be restarted to reconnect to the smb share.
Question:
- Is this problem of XI?
- Could this be a problem of the SAMBA deamon?
- anything else?
This behavior isnt acceptable because we have do this manual . Are there any hints to solve this issue?
thx
Andre

What does it mean? The smb share is a permanent mount?! Do I have to configure this in XI?
thx
Andre

Permit SharePoint group to have contribute access at Folder level only and read permission at library level.

Is it possible to Permit SharePoint group to have contribute access at Folder level only and read permission at library level.
Ashish Baranwal To know what you know and what you do not know, that is true knowledge

Hi Ashish,
You can have special permissions for individual lists or libraries (or folders within a library) what you have to do is to go
to the manage permissions list or document library for the appropriate item or folder and stop inheriting permissions from Parent and then you can add any sorts of permissions you want uniquely to that item or folder.
Check for further reference.
http://social.technet.microsoft.com/wiki/contents/articles/18203.sharepoint-2013-break-document-library-permissions-inheritance.aspx
you have to break the inheriting permission of document library and assign the permission you want again you have to set the same for folder
level.
For your better understaning the concept check here
http://blog.pentalogic.net/2010/11/sharepoint-permissions-what-why-and-how-part-1-basic-principles/
While you probably won't come across this in your case, be careful when breaking security permission inheritance on the items in a a document
library or list. There are big performance hits. If you have inherited permissions on a library or list SharePoint only has to do one permissions check for all the contents. If you have unique permissions SharePoint has to check every document's permissions
before returning the contents of the library. This tends to become an issue when you have thousands of items, rather than
hundreds.
Krishana Kumar http://www.mosstechnet-kk.com
Please mark the replies and Proposed as answer if they help and solve your issue

Groups missing inherited permissions from parent folder on SMB share on save

Similar Messages

Maybe you are looking for